Infy Hackers Resume Operations with New C2 Servers After Iran Internet Blackout Ends
Even as it prepared new command-and-control (C2) infrastructure in tandem with the end of the regime's widespread internet blackout at the beginning of January 2026, the elusive Iranian threat group known as Infy (also known as Prince of Persia) has changed its strategies in an attempt to conceal its tracks.
According to a report provided with The Hacker News by Tomer Bar, vice president of security research at SafeBreach, the threat actor ceased maintaining its C2 servers on January 8 for the first time since we started keeping an eye on their operations.
In reaction to previous protests, Iranian authorities ordered a nationwide internet blackout on the same day, which probably indicates that even government-affiliated cyber units lacked the capacity or incentive to engage in hosti...