US charges Iranians with cyber snooping on government, companies

The US has charged and sanctioned four Iranian nationals who allegedly worked for IRGC-linked front companies to conduct spearphishing, social engineering, and malware-enabled intrusions between 2016 and 2021 against more than a dozen US companies and government departments (including the State and Treasury departments and defense contractors), compromising accounts (one incident affected ~200,000 staff accounts) and managing infrastructure to support follow-on attacks.