Four Iranian nationals (Hossein Harooni, Reza Kazemifar, Komeil Baradaran Salmani, and Alireza Shafie Nasab) were members of a hacking organization from 2016 to 2021 that targeted U.S. companies and the Departments of Treasury and State. The group’s private-sector victims were mainly defense contractors with security clearance. Their primary techniques were spear phishing and social engineering.