Iranian Hackers Resurface: The Return of the Prince of Persia Cyber Threat
In a plot twist worthy of a cyber-thriller, the Iran-linked hacking group Infy, aka Prince of Persia, has returned from the shadows. SafeBreach researchers reveal their renewed activity, proving that just like a bad internet connection, Infy never really left.

Hot Take:
Just when you thought it was safe to go back online, here comes Infy, the Prince of Persia, with a new digital sword dance. Turns out, they’ve been silently sharpening their skills and are now back to remind us why Iranian hacking groups are still a force to be reckoned with in the cyber world. Stay alert, because these hackers are more persistent than a telemarketer with your number on speed dial.
Key Points:
- Infy, aka Prince of Persia, is back and more dangerous after a five-year hiatus.
- The group has been linked to the Iranian government, with a history of targeting dissidents and diplomats.
- New malware variants and C2 servers have been discovered, indicating advanced capabilities.
- Infy now uses Telegram for data exfiltration, moving away from older FTP methods.
- Despite appearing inactive since 2022, Infy has remained active, updating its methods and tools.
Already a member? Log in here
