Researchers say the Iran-linked threat actor used an adaptable modular malware framework and compromised IT service providers ...