Iranian APT ‘Prince of Persia’ Resurfaces With New Tools and Targets

SafeBreach Labs reports that the Iranian APT “Prince of Persia” (Infy) has re-emerged with expanded operations, using malware families Foudre (scout) and Tonnerre (payload), Domain Generation Algorithms, and Telegram-based command-and-control to target diplomats, activists, and critical systems globally; researchers recovered stolen files and observed variants spying on Telegram accounts, indicating an active, sophisticated espionage campaign.