The Iran-linked group is using a variant of the data-exfiltration OopsIE trojan to attack a Mideast government entity.
Source: Threadpost