Iranian Infy APT Resurfaces with New Malware Activity After Years of Silence
Nearly five years after the hacker outfit was seen targeting victims in Sweden, the Netherlands, and Turkey, threat hunters have discovered new behavior linked to an Iranian threat actor identified as Infy (also known as Prince of Persia).
In a technical analysis provided to The Hacker News, Tomer Bar, vice president of security research at SafeBreach, stated that Prince of Persia's activity is larger than we first thought. This threat organization is still hazardous, relevant, and active.
According to a report published by Palo Alto Networks Unit 42 in May 2016 and co-authored by Bar and researcher Simon Conant, Infy is one of the oldest advanced persistent threat (APT) actors in existence, with evidence of early activity going all the way back to December 2004.
In contrast to o...