The Mabna Institute is a Tehran-based cyber group linked to Iran's Ministry of Intelligence and Security (MOIS). Five of its members were sanctioned by the U.S. Treasury for conducting widespread compromises of U.S. critical infrastructure, including energy, defense, healthcare, and financial sectors. The group also engaged in cryptocurrency theft and targeted Iranian companies for personal profit.