Silent Librarian
- ID
- G0122
- Associated names
- TA407, COBALT DICKENS
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).[1][2][3]
Techniques used (13)
- T1078 Valid Accounts
- T1110.003 Password Spraying
- T1114 Email Collection
- T1114.003 Email Forwarding Rule
- T1583.001 Domains
- T1585.002 Email Accounts
- T1588.002 Tool
- T1588.004 Digital Certificates
- T1589.002 Email Addresses
- T1589.003 Employee Names
- T1594 Search Victim-Owned Websites
- T1598.003 Spearphishing Link
- T1608.005 Link Target