Infy is a cyber-espionage threat actor group, assessed with high confidence to be state-sponsored and operating out of Iran, with activities first documented as early as December 2004. Historically one of the oldest Iranian advanced persistent threats, the group has resurfaced after periods of dormancy, demonstrating notable evolution in its structure and operational methods. Their primary motivation is intelligence gathering and data exfiltration, specifically targeting governments, critical infrastructure, and dissidents. Infy is also known by the aliases Prince of Persia, Foudre, Operation Mermaid, and APT-C-07. The group distinguishes itself through its persistent and adaptive approach, including the continuous evolution of its proprietary malware families and a notable shift towards leveraging legitimate platforms like Telegram for command and control, as well as a focus on laser-focused attacks on individuals for intelligence collection.

Aliases del actor

FoudreOperation MermaidPrince of PersiafoudreinfyAPT-C-50incluidos Estados UnidosIsraelDinamarca

Actores similares

apt-45actor · 2apt-c-27actor · 2apt-c-01actor · 2apt-c-12actor · 1apt-18actor · 1apt-1877teamactor · 1apt-27actor · 1apt-30actor · 1apt-38actor · 1apt-c-48actor · 1