It’s a follow-up to an indictment the Justice Department unsealed last week against people affiliated with the Mabna Institute.

The superseding indictment adds defendants and allegations against the Iranian firm accused of a massive cybertheft campaign against foreign universities and others.

Secureworks researchers say this campaign used some of the same infrastructure as the Iranian hackers whom the U.S. indicted earlier this year.