The U.S. Treasury designated a six-person Iranian Ministry of Intelligence and Security cyber cell under Operation Economic Outcast, tying the group to about $16.8 million in cryptocurrency across 30 Bitcoin, Ethereum and TRON addresses linked to Mabna Institute members. TRM Labs found activity back to January 2018, with Keyvan Fayaz Ghareh Blagh’s ten wallets taking in roughly $15.5 million, or 92% of the cluster, while residual balances were only about $202,662. Four designees are charged in a 14-count DOJ superseding indictment unsealed August 18, 2026, alleging Mabna’s long-running campaign against hundreds of universities and other targets on behalf of Iranian state actors including the IRGC. The August 24 package added EO 13902 sectoral determinations covering digital assets and other sectors, building on a July freeze of more than $130 million in USDT in four Tron wallets linked to Iran’s central bank and earlier sanctions on Nobitex.