Russian-linked hackers known as the Turla group have been piggybacking on Iranian hackers’ tools and infrastructure for years now to run their own attacks.
Researchers have dubbed the group Hexane, and they say it has been particularly active in recent months.
Servers, domains and other infrastructure are a contested resource like any other on the internet.
An unknown person or group started doxing the people behind OilRig sometime last month.
A new report focuses on OopsIE, a trojan first tracked earlier this year, being used in spearphishing attacks against a highly targeted a Middle Eastern government agency.