Silent Librarian
Silent Librarian is an Iran-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 8 sectors, including Government and Technology, in 26 countries, including the United States and the United Kingdom. It uses 14 MITRE ATT&CK techniques and exploits 14 known CVEs.
- TA407
- COBALT DICKENS
- Mabna Institute
- Yellow Nabu
- TA4900
- Academic Serpens
- G0122
- Origin
- Iran
- Techniques
- 14
- Exploited CVEs
- 14
- First seen
- Jan 1, 2013
- Last seen
- Oct 14, 2020
- Record updated
Who They Target.
About Silent Librarian.
Silent Librarian is a group that has targeted research and proprietary data at universities, government agencies, and private sector companies worldwide since at least 2013. Members of Silent Librarian are known to have been affiliated with the Iran-based Mabna Institute which has conducted cyber intrusions at the behest of the government of Iran, specifically the Islamic Revolutionary Guard Corps (IRGC).
Last updated Sep 19, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.