Risk Level:
99% May harm your business future; Persons or entities that engage in transactions with this entity will be exposed to sanctions or subject to an enforcement action;

Working with this entity means supporting Iranian Regime, Regime Terrorist Activities & development of WMD

Top Alert – Entity designated / sanctioned for terror, WMD and human rights violation

The Mabna Institute is an Iran-based company that engaged in the theft of personal identifiers and economic resources for private financial gain;

The organization was founded in or about 2013 to assist Iranian universities and scientific and research organizations in obtaining access to non-Iranian scientific resources;

The Mabna Institute also contracted with Iranian governmental and private entities to conduct hacking activities on its behalf;

The Mabna Institute conducted massive, coordinated cyber intrusions into computer systems belonging to at least approximately 144 United States-based universities, in addition to at least 176 universities located in 21 foreign countries;

The exfiltrated data and stolen login credentials acquired through these malicious cyber-enabled activities were used for the benefit of Iran’s Islamic Revolutionary Guard Corps (IRGC), and were also sold within Iran through at least two websites;

The stolen login credentials belonging to university professors were used to directly access online university library systems;

Also Known As:
Mabna Institute

Involved In:
Cyber crime


Mirdamad, Naft Jonubi, Taban Alley, Plaque 2/1, Unit 102, Tehran, Iran;
East Shahid Hemmat Highway, North Emam Ali Highway, East Artesh Highway, Town of Qa’em, Banafsheh Street, Second Door, Plaque 2, Tehran, Iran;
Ansariyeh Boulevard, 6th Bustan, Plaque 488, 4515736541, Zanjan, Iran;

Person of interests:
Gholamreza Rafatnejad;
Ehsan Mohammadi;
Seyed Ali Mirkarimi;
Mostafa Sadeghi;
Sajjad Tahmasebi;
Abdollah Karima;
Abuzar Gohari Moqadam;
Roozbeh Sabahi;
Mohammed Reza Sabahi;

Reason for the color:
» U.S. Department of Justice, the U.S. Department of the Treasury’s Office of Foreign Assets Control (OFAC) designated Mabna Institute under Executive Order (E.O.) 13694, “Blocking the Property of Certain Persons Engaging in Significant Malicious Cyber-Enabled Activities,” as amended. The entity designated today engaged in the theft of valuable intellectual property and data from hundreds of U.S. and third-country universities and a media company for private financial gain;
» Mabna Institute hackers penetrated systems belonging to hundreds of universities, companies, and other victims to steal research, academic and proprietary data, and intellectual property;

You May Be Interested

IFMAT Color Guide

We sort entities who are connected with terrorist activities, in two sections, first by risk and second by geolocation.
GeoLocation divisions are divided into two fields, Black List and Gray List.
BlackList is a list of all companies, organizations and figures who originate from Iran.
GrayList is a list of all companies, organizations and figures out of Iranian borders, and doing business with Iran.
We identify risk of entities by COLOR selection, each color marks the risk level of the entity.(by declining order)
Designated / Sanctioned / Illicit entities
Entities affiliated with Designated / Sanctioned / Illicit entities.
Entities sanctioned in the past for Terror or Illicit activities / WMD related / Human rights violations.
Entities in a problematic sector - Sector controlled by the Top Alert entities.
Legitimate entities - we cannot determine whether an entity is completely green, and that is due to the facts that the Iranian economy is not transparent enough for us. Be sure.