Actors Insights|Latest update04/07/2026

Infy

Named by Palo AltoSuspected state sponsor: Islamic Republic of Iran

Infy is a long-running Iranian cyber espionage cluster active since at least 2007, first documented publicly by Palo Alto Networks in 2016. The group primarily targets Iranian dissidents, opposition members, and foreign government officials involved in Iran policy, using Windows-based spyware to collect keystrokes, screenshots, and audio recordings. After Palo Alto disrupted its infrastructure in 2016, the group returned with a successor malware family called Foudre, demonstrating notable operational resilience. The cluster is also tracked as Prince of Persia and linked to the Operation Mermaid campaign.

First Seen:May 2015
Last Seen:Mar 2026
Indexed Reports:2
Public IOCs:462
Cluster: InfyMisp: Infy
also known as:
Operation Mermaid (Qihoo 360)Prince of Persia (Palo Alto)Foudre (Bitdefender)Infy (Palo Alto)

Targeted Regions

Azerbaijan
AZ
Azerbaijan
Azerbaijan
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Canada
CA
Canada
Canada
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Denmark
DK
Denmark
Denmark
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Germany
DE
Germany
Germany
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
India
IN
India
India
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Iran
IR
Iran
Iran
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Iraq
IQ
Iraq
Iraq
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Israel
IL
Israel
Israel
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Netherlands
NL
Netherlands
Netherlands
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Romania
RO
Romania
Romania
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Russia
RU
Russia
Russia
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Sweden
SE
Sweden
Sweden
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Turkey
TR
Turkey
Turkey
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
United Kingdom
GB
United Kingdom
United Kingdom
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
United States
US
United States
United States
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Feb 2017 ~ Feb 2021
Jan 2017Aug 2026

Recent Indexed Reports

  1. Public
    Infy Group's Evolving Cyber Tactics: Unveiling Foudre and Tonnerre Malware
  2. Public
    The Evolution of Infy: Cyber Espionage Campaigns Against Western Entities

Disclaimer: We are working on indexing and analyzing relevant data and this process is not fully completed yet. Therefore, displayed details and statistics may will change in the future.