Microsoft has observed multiple Iranian threat actors targeting the IT
services sector in attacks that aim to steal sign-in credentials belonging to
downstream customer networks to enable further attacks.
Iranian targeting of IT sector on the rise – Microsoft Security Blog