UK and U.S. intelligence agencies say Turla group stole cyberattack tools from Iran and used them against dozens of targets to exfiltrate data. Turla has been in existence since at least 2014 and has been tied to numerous campaigns targeting Western governments and businesses. The UK and US intelligence agencies stopped short of attributing Turla’s activities to the Russian government, but security experts say the finding is undoubtedly an intelligence coup. The tools appear to have belonged to the Iranian APT group OilRig, which many security experts believe is backed by the Iranian government.”]
Source: https://www.cuinfosecurity.com/russian-hackers-co-opted-iranian-apt-groups-infrastructure-a-13275