Know What's Happening in Technology

Dormant Iran APT Is Still Alive, Spying on Dissidents

Iran’s long‑standing state‑level threat group, known as Prince of Persia or Infy, has resurfaced after years of apparent inactivity. SafeBreach’s latest report shows the APT has been continuously spying on Iranian citizens and dissidents across Iraq, Turkey, India, Europe and Canada. The group relies on its custom malware families, Foudre and Tonnerre, which employ sophisticated RSA‑verified domain‑generation algorithms and Telegram‑based command‑and‑control. State‑owned Iranian telecom recently intervened to block a sinkhole, ensuring the actor’s infrastructure remains operational.