The sites were part of a network used to communicate with assets, which was initially compromised by Iran.