Iranian Accused of Hacking American Universities Extradited From Montenegro

**Executive Summary:** The DOJ indictment and extradition of Amir Barati allege that Iran's Mabna Institute conducted a 2013–2017 spearphishing campaign that targeted over 100,000 academic accounts, compromised roughly 8,000 professor mailboxes, exfiltrated ~31 TB of research from 144 U.S. and 178 foreign universities, and monetized stolen data via Iran-based marketplaces; the report outlines attack methods (spoofed login pages, persistent mailbox forwarding), scope, impact estimates, and mitigation recommendations (MFA, mailbox rule audits, phishing training, monitoring for anomalous access).