Dormant Iran APT is Still Alive, Spying on Dissidents

# Executive summary Prince of Persia (aka Infy) is a long-running Iranian state-linked APT active since ~2004 that remains operational and conducting espionage using updated malware families Foudre (lightweight first-stage) and Tonnerre (full-featured backdoor) which employ domain-generation algorithms, RSA-based C2 verification and selective Telegram API usage to resist detection, takedown, and analysis; SafeBreach's report documents continued targeting of Iranian citizens and individuals in Iraq, Turkey, India, Europe, and Canada and highlights apparent telecommunications/state support that preserved the actor's infrastructure.