After a recent nationwide internet blackout in Iran, the Infy hacking group, also known as Prince of Persia, has resumed its cyber activities. The group ceased maintaining its command-and-control (C2) servers on January 8, coinciding with the start of the blackout. As internet access was restored, Infy deployed new C2 infrastructure to continue its operations.
This development highlights the group’s adaptive tactics to avoid detection and maintain control over its cyber campaigns. Infy’s ability to quickly establish new servers following the disruption demonstrates its resilience and ongoing threat potential.
**Why this matters**
Infy is a persistent cyber threat linked to Iran, targeting various sectors with espionage and cyberattacks. The group’s swift recovery after the internet blackout indicates that such disruptions may only temporarily hinder their activities. Understanding these patterns is crucial for organizations and governments aiming to defend against evolving cyber threats.
Source: NewsData