The attacks, targeting several countries to redirect traffic and harvest credentials, have been linked to Iran.

Source