Iranian hackers have infiltrated some of the world's top energy, transport and infrastructure companies over the past two years in a campaign that could allow them to eventually cause physical damage, according to U.S. cybersecurity firm Cylance.

Aerospace firms, airports and airlines, universities, energy firms, hospitals and telecommunications operators based in the United States, Israel, China, Saudi Arabia, India, Germany, France and England have been hit by the campaign, the research firm said, without naming individual companies.

A person familiar with the research said U.S. energy firm Calpine Corp., state-controlled oil companies Saudi Aramco and Petroleos Mexicanos (Pemex), as well as flag carriers Qatar Airlines and Korean Air were among the specific targets.