The action from multiple U.S. departments is against 10 Iranians and two Iranian companies related to a spree of breaches and cyberattacks.

The tactic linked to an Iranian group creates the impression the email activity is real by employing a phenomenon known as "social proof."

The alleged Iranian cyberattack attack follows U.S. sanctions on Iran after Albania blamed it for hacking government systems.

The July attacks involved multiple groups responsible for different aspects of the operation against Albania, researchers said.

The Iranian cyberespionage group known as APT 42 is characterized by targeted spear phishing campaigns and extensive surveillance operations.

A group called "Homeland Justice," which the Albanian government said is a front for Iranian hackers, took responsibility for the cyberattacks.