Security expert uncovered a DNS hijacking campaign targeting organizations in various industries worldwide and suspects Iranian APT groups. The campaign is targeting government agencies, Internet infrastructure entities, and sensitive commercial organizations in the Middle East, North Africa, North America and Europe. FireEye researchers tracked access from Iranian IPs to machines used to intercept, record and forward network traffic. The same IPs were previously associated with cyber attacks conducted by Iranian cyberspies. The attackers are not financially motivated and targeted Middle Eastern governments whose data would be of interest to Iran.”]
Source: https://securityaffairs.co/wordpress/79722/apt/iran-apts-dns-hijacking.html