An Iranian-backed actor that was known to have attempted to infiltrate accounts linked to people affiliated with former President Donald Trump has also targeted individuals in President Biden and Vice President Kamala Harris’s orbit as well, Google claimed on Wednesday.

The search-engine behemoth cautioned that it expects the Iran-backed actor, APT42, to ramp up its cyber efforts amid escalating tensions between Israel and Iran after having already targeted dozens of key officials.

“APT42 is a sophisticated, persistent threat actor and they show no signs of stopping their attempts to target users and deploy novel tactics,” the tech giant wrote in a blog post.

“This spring and summer, they have shown the ability to run numerous simultaneous phishing campaigns, particularly focused on Israel and the US,” Google added.

Last Saturday, the Trump campaign confirmed that it was the victim of an attack from Iranian actors that Microsoft had revealed without identifying the specific victim.

Multiple news organizations including Politico and the Washington Post claimed to have received Trump campaign material that appeared to have been part of the hack.

Specifically, those outlets claimed to have been sent a 271-page document that appeared to be vetting material about Republican vice presidential nominee JD Vance.

It included his potential vulnerabilities and was developed by Brand Woodward, a law firm that does work for a handful of Trump advisers.

Microsoft didn’t mention APT42 specifically, but revealed that an Iranian group with ties to the Islamic Revolutionary Guard Corps sent a spear phishing email to a campaign official.

Google described APT42 as being affiliated with the IRGC and engaging in phishing schemes targeting accounts “associated with the US presidential election.”

The US was on the receiving end of 31% of APT42’s attacks, according to Google, and Israel weathered the same percentage. Attacks against Israel appeared to have spiked in April and May.

Google further claimed to have eliminated “APT42-created Google Sites pages” that pretended to be a “petition from the legitimate Jewish Agency for Israel calling on the Israeli government to enter into mediation to end the conflict.”

Iran has long been believed to be interested in hampering Trump’s reelection prospects, driven by a desire for revenge over his ordering of the strike that killed Iranian Gen. Qasem Soleimani back in 2020 as well as his predilection for hefty sanctions against the regime.

Google confirmed that APT42 has also taken aim at Biden and Harris, but suggested those efforts have not been successful.

“Today, TAG [Google’s Threat Analysis Group] continues to observe unsuccessful attempts from APT42 to compromise the personal accounts of individuals affiliated with President Biden, Vice President Harris and former President Trump, including current and former government officials and individuals associated with the campaigns,” the search engine company wrote.

The company further explained that it scuttled efforts by APT42 to attack accounts affiliated with the Trump and Biden campaigns back in the 2020 cycle and that it has done so this year as well.

“In May and June, APT42 targets included the personal email accounts of roughly a dozen individuals affiliated with President Biden and with former President Trump,” Google wrote.

Tactics of the group include disbursing phishing links in emails to high-profile officials and setting up bogus websites that look legitimate to gain information that can be used to help break into accounts.

Google noted that accounts without multi-factor authentication were most vulnerable to those kinds of attacks.

In addition to the hacks, Iran has been accused of backing efforts to assassinate Trump, including a recent federal complaint filed against Pakistani national Asif Merchant, 46, for plotting assassinations in New York City.

While the court documents didn’t name Trump as the specific target, US Attorney General Merrick Garland later confirmed that was the case.

Back in 2021, the director of National Intelligence declassified an assessment that Iran targeted Trump during the 2020 election cycle.

“We assess that Iran carried out a multi-pronged covert influence campaign intended to undercut former President Trump’s reelection prospects – though without directly promoting his rival,” the document read. “We assess that Supreme Leader Khamenei authorized the campaign.”

Last month, the Office of the Director of National Intelligence re-upped its concerns about Iranian meddling and told reporters that it hasn’t “observed a shift in Iran’s preferences” this cycle. It did not elaborate on the alleged campaign against Trump.

Iran has publicly denied the allegations of election meddling.