Scworld Iranian APT 'Prince of Persia' Resurfaces with New Malware Variants
Article Content
Browse articles 
The Iranian threat group known as Prince of Persia has re-emerged with three new malware strains targeting critical infrastructure globally. A December 2025 report from SafeBreach revealed that the group, which had been dormant since 2022, has resumed operations using a variety of malware and command-and-control servers to attack new victims.
Ask AI about this cluster
Answers cite the sources they use
Updated 228d ago How this analysis works
More articles in this cluster (2)
Following this threat?
Track Infy and Foudre in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Iranian Nation-State Group Hosts C2 Infrastructure in the US Semperis has identified the Iranian nation-state threat group known as Prince of Persia operating a command-and-control (C2) server in the United States for the first time in a decade. This discovery was made by Tomer Bar, AVP of Security Research at Semperis, who has tracked the group for ten years. The group had… 
.NET Vulnerability CVE-2026-111497 Requires Immediate Action On October 25, 2026, Microsoft released out-of-band security updates for.NET addressing CVE-2026-111497, a vulnerability in the Brotli decompression algorithm that allows unauthorized attackers to elevate privileges over a network. The flaw affects.NET versions 8, 9, 10, and 11, particularly in applications that…