frankfurt hackers probably link iran government hit saudi western aerospace petrochemical firm mark rise iranian cyber-spying prowess security firm fireeye feye.o say wednesday assessment share u.s. experts fireeye report wednesday dub hacker group apt33 offer evidence activities since 2013 seek steal aviation military secrets also gear attack might cripple entire computer network separate relate move last week u.s. treasury department add two iran-based hack network eight individuals u.s. sanction list accuse take part cyber-enabled attack u.s. financial system iran islamic revolutionary guard corps elements also add u.s. sanction list immediately available comment contact phone reuters wednesday end country work week fireeye identify apt33 call investigate cyber attack u.s. aviation organisation saudi business conglomerate aviation hold south korean group interest oil refine petrochemicals fireeye decline name company iranian fingerprint campaign government fingerprint particular john hultquist fireeye director cyber espionage analysis tell reuters right see lot activity seem classic cyber espionage apt33 first state-backed group iran join list fireeye compile decade identify campaign chinese russian north korean cyber spy apt stand advance persistent threat hultquist say apt33 share tool appear distinct around 15 different hack group iranian tie security researchers identify recent years carry name like shamoon rocketkitten charm kitten kitten nomenclature reflect low level respect iran hack capabilities past experts note several cyber experts describe rise maturity professionalism iran cyber-espionage capabilities recent years iran invest heavily build computer network attack exploit capabilities say frank cilluffo director george washington university center cyber homeland security cilluffo former homeland security advisor president george w. bush estimate last year testimony u.s. congress iran cyber budget jump twelve-fold president rouhani make top five world cyber-power also integrate cyber operations military strategy doctrine tell reuters wednesday fireeye say attack saudi south korean group hit recently may use phishing techniques involve post fake job vacancies saudi oil job lure corporate victims goo.gl/mc1bly speak reporters singapore fireeye chief executive kevin mandia say iranian cyber espionage grow sophistication since first spot iranians conduct rudimentary attack u.s. state department 2008. good get real capability mandia say iran investigations attack western company governments fireeye hire iran rank china russia term frequency say iran scale cyber capacities since unite state israel carry cyber assault iran 2010 know stuxnet worm aim disable centrifuge nuclear programme say fireeye evidence link iran aviation attack include use farsi language malware mount attack fact hackers observe islamic republic work week take thursdays among evidence fireeye find tie apt33 nasr institute experts connect iranian cyber army offshoot revolutionary guard yet find link specific government agency hultquist say say apt33 build destructive attack capacity malware use infect western company evidence far activate however fireeye believe matter time group graduate intelligence gather cause last damage adam meyer vice president crowdstrike another top u.s. cyber security firm say vast uptick attack iran saudi arabia since last year five years ago iran blame virus attack oil giant saudi aramco qatari rasgas cripple 30,000 computers two organisations meyer say hindsight shamoon attack narrow unsustained operation broader-based attack saudi arabia since 2016 use similar malware change demonstrate iran ability mount on-going campaign say second campaign carry sustain way 2016 2017 saudi government relate entities telecom sector way seek destabilise saudi regime meyers say 'kittens cyber spy world iran gain prowess security experts