An Iranian threat actor is believed to be responsible for using fake job offers to gain access to the email systems of major Israeli software companies. After gaining access to a system, the threat actor would install a backdoor to gain further information from the company's system or to launch phishing attacks.