A U.S court documents published today show that Microsoft has succeeded in a case against Iranian state hackers and was able to take control of 99 domains that the group used for their attacks. The domains included APT35, Phosphorus, Charming Kitten, and the Ajax Security Team. In the attached list which was published, there are domains with such names as outlook-verify.net, yahoo-verify.net, and even Telegram.net, which all previously belonged to Iranian hackers.

Hackers used these copycat domains and created webpages similar to websites like Microsoft, Yahoo, Google, and Telegram in order to trick their victims into revealing their passwords and gain access to their data.

The group has been accused of numerous hackings and attacks against foreign and domestic activists and officials. American officials, nuclear scientists in the middle east, journalists, and Saudi Arabian oil and gas companies have been among the targets of this group.

Earlier in March Microsoft published a report on the amount of damages this group has caused to over 2200 individuals and 200 institutions, which is in millions of dollars.

It is said that one of the people helping this group is Monica Witt, a former American counterintelligence officer who defected and currently lives in Iran.