Actors Insights|Latest update04/07/2026

Prince of Persia

Named by Palo AltoSuspected state sponsor: Islamic Republic of Iran

Prince of Persia is Intezer's campaign tracking name for continued Infy cluster operations documented from 2015 through at least 2025. The campaign represents the third documented evolution of the same Iranian surveillance infrastructure — following the original Infy malware and the Foudre rebuild — showing the group's sustained commitment to long-term espionage despite repeated public exposure. Prince of Persia campaigns target Iranian dissidents, opposition figures, and government officials using spear phishing with evolved malware families that incorporate improved anti-detection techniques, demonstrating the Infy cluster's operational longevity spanning nearly two decades.

First Seen:May 2015
Last Seen:Dec 2025
Indexed Reports:5
Public IOCs:531
Cluster: InfyMisp: Infy
also known as:
Operation Mermaid (Qihoo 360)Prince of Persia (Palo Alto)Foudre (Bitdefender)Infy (Palo Alto)

Targeted Regions

Afghanistan
AF
Afghanistan
Afghanistan
Jun 2016 ~ Jun 2016
Australia
AU
Australia
Australia
Jun 2016 ~ Jun 2016
Austria
AT
Austria
Austria
Jun 2016 ~ Jun 2016
Azerbaijan
AZ
Azerbaijan
Azerbaijan
Feb 2017 ~ Aug 2017
Feb 2017 ~ Aug 2017
Bahrain
BH
Bahrain
Bahrain
Jun 2016 ~ Jun 2016
Belgium
BE
Belgium
Belgium
Jun 2016 ~ Jun 2016
Canada
CA
Canada
Canada
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
China
CN
China
China
Jun 2016 ~ Jun 2016
Denmark
DK
Denmark
Denmark
May 2015 ~ May 2016
May 2015 ~ May 2016
May 2015 ~ May 2016
Europe
EU
Europe
Europe
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Finland
FI
Finland
Finland
Jun 2016 ~ Jun 2016
France
FR
France
France
Jun 2016 ~ Jun 2016
Germany
DE
Germany
Germany
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
India
IN
India
India
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Indonesia
ID
Indonesia
Indonesia
Jun 2016 ~ Jun 2016
Iran
IR
Iran
Iran
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
Nov 2017 ~ Aug 2018
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
Nov 2017 ~ Aug 2018
May 2016 ~ Dec 2025
Nov 2017 ~ Aug 2018
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Iraq
IQ
Iraq
Iraq
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Ireland
IE
Ireland
Ireland
Jun 2016 ~ Jun 2016
Israel
IL
Israel
Israel
May 2015 ~ May 2016
May 2015 ~ May 2016
Jun 2016 ~ Jun 2016
May 2015 ~ May 2016
Italy
IT
Italy
Italy
Jun 2016 ~ Jun 2016
Jordan
JO
Jordan
Jordan
Jun 2016 ~ Jun 2016
Lebanon
LB
Lebanon
Lebanon
Jun 2016 ~ Jun 2016
Malaysia
MY
Malaysia
Malaysia
Jun 2016 ~ Jun 2016
Netherlands
NL
Netherlands
Netherlands
Jun 2016 ~ Jun 2016
Norway
NO
Norway
Norway
Jun 2016 ~ Jun 2016
Pakistan
PK
Pakistan
Pakistan
Jun 2016 ~ Jun 2016
Qatar
QA
Qatar
Qatar
Jun 2016 ~ Jun 2016
Romania
RO
Romania
Romania
Jun 2016 ~ Jun 2016
Russia
RU
Russia
Russia
Jun 2016 ~ Jun 2016
Saudi Arabia
SA
Saudi Arabia
Saudi Arabia
Jun 2016 ~ Jun 2016
Seychelles
SC
Seychelles
Seychelles
Feb 2017 ~ Aug 2017
Feb 2017 ~ Aug 2017
Sweden
SE
Sweden
Sweden
Jun 2016 ~ Jun 2016
Feb 2017 ~ Aug 2017
Feb 2017 ~ Aug 2017
Switzerland
CH
Switzerland
Switzerland
Jun 2016 ~ Jun 2016
Syria
SY
Syria
Syria
Jun 2016 ~ Jun 2016
Tajikistan
TJ
Tajikistan
Tajikistan
Jun 2016 ~ Jun 2016
Turkey
TR
Turkey
Turkey
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
United Arab Emirates
AE
United Arab Emirates
United Arab Emirates
Jun 2016 ~ Jun 2016
United Kingdom
GB
United Kingdom
United Kingdom
Jun 2016 ~ Jun 2016
Feb 2017 ~ Aug 2017
Feb 2017 ~ Aug 2017
United States
US
United States
United States
May 2015 ~ May 2016
May 2015 ~ May 2016
May 2016 ~ Dec 2025
Jun 2016 ~ Jun 2016
May 2015 ~ May 2016
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
Feb 2017 ~ Aug 2017
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
May 2016 ~ Dec 2025
Jan 2015Jul 2026

Targeted Sectors

Government Agencies and ServicesPolitical

Recent Indexed Reports

  1. Public
    Prince of Persia APT Expands Long-Running Iranian Cyber Espionage Operations
  2. Public
    Prince of Persia: Evolution of Iranian Malware Campaign with Foudre V8
  3. Public
    Foudre: The Advanced Evolution of Infy Malware with Enhanced Anti-Takedown Capabilities
see more

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.