Is Iran’s APT34 behind the Sea Turtle cyber espionage campaign?
The cyber security experts: There are many similarities on TTPs, targets and purposes. The credential harvesting could be complementary to the WebMask project on DNS Hijack.
Sea Turtle campaign is harvesting credentials in Middle East and North Africa
Cisco Talos cyber security experts: At least 40 organizations across 13 different countries were compromised by a state-sponsored actor who exploits DNS hijacking.