Iranian Hacking Group Discovered Targeting Aerospace and Telecom

A newly discovered hacking group with alleged ties to the Iranian government has waged a yearslong campaign to steal information from aerospace and telecommunications companies in the Middle East, the U.S., Europe and Russia, according to cybersecurity researchers.

The hacking group, dubbed MalKamak by the researchers, disguised its activities by using the U.S.-based file storage service Dropbox Inc. as the “command and control” server from which it orchestrated hacking operations, according to a report published by Cybereason Inc. on Wednesday. The use of Dropbox helped conceal the hackers’ activity, making it look like the network traffic from compromised computers was associated with legitimate uploads and downloads from the Dropbox website, Cybereason found.