Researchers at Cylance have been following a hacker group dubbed Operation Cleaver that they believe has quietly infiltrated about 50 companies in critical infrastructure industries in 16 countries. The group’s victims have included companies in the oil and gas sector, the energy industry, airports and the transportation sector, government and defense, and telecommunications and technology industries. The 20-person group masquerades as a construction engineering firm in Tehran, has grown considerably in sophistication over the past two years. The tactics used by the group to infiltrate networks are similar to those employed by other groups.”]
Source: https://www.darkreading.com/attacks-breaches/with-operation-cleaver-iran-emerges-as-a-cyberthreat