because "regin" is here, and has been here since 2008! Quite weird choice of preferred targets if you ask me. No banks? No places to steal money?

Regin (malware) - Wikipedia, the free encyclopedia

Regin Malware - 'State-Sponsored' Spying Tool Targeted Govts

Regin Malware uses a modular approach allowing it to load features that exactly fit the target, enabling a customized spying. The malware’s design makes it highly suited for persistent, long-term mass surveillance operations against targets, says the antivirus company.The notorious malware’s main targets include ISP’S ( Internet service providers ) and telecommunications companies, where it appears the Trojan is used to monitor calls and communications routed through the firm’s infrastructure. Other targets include organisations in hospitality, health sectors, energy, airline and research.