Infy
Also reported as Prince of Persia, Operation Mermaid, Foudre and APT-C-07. Linked to Iran by three sources.
Reports per quarter
CVEs named in reports
- CVE-2024-1709 KEV ransomware
- CVE-2024-21893 KEV ransomware
- CVE-2025-6218 KEV
- CVE-2025-8088 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
Infy, Prince of Persia - Threat Group Cards: A Threat Actor Encyclopedia
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor Infy, Prince of Persia - Threat Group Cards: A Threat Actor Encyclopedia
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor After Lightning Comes Thunder
-
Prince of Persia- The Sands of Foudre
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia- The Sands of Foudre
-
Prince of Persia: The Sands of Foudre
The original link failed its last check. Original publisher Detailsfor Prince of Persia: The Sands of Foudre
Show all 23 reports Show fewer
-
Prince of Persia – Ride the Lightning- Infy returns as “Foudre”
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia – Ride the Lightning- Infy returns as “Foudre”
-
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Prince of Persia Game Over
-
Prince of Persia – Game Over - Palo Alto Networks BlogPalo Alto Networks Blog
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia – Game Over - Palo Alto Networks BlogPalo Alto Networks Blog
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia – Game Over
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia: Infy Malware Active In Decade of Targeted Attacks - Palo Alto Networks BlogPalo Alto Networks Blog
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia Hashes
-
Prince of Persia- Infy Malware Active In Decade of Targeted Attacks
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Prince of Persia- Infy Malware Active In Decade of Targeted Attacks
-
Prince of Persia: Infy Malware Active In Decade of Targeted Attacks
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Prince of Persia: Infy Malware Active In Decade of Targeted Attacks
Newest first. Details opens the report in Explore.