apt

Infy / Prince of Persia

dormantAttribution: ModeratePlausible and partly corroborated — some gaps or single-source elements.

APT / State-sponsored

Prince of PersiaOperation MermaidFoudre

Attribution

Iran — assessed state-linked (medium confidence; no MITRE Group ID)

Origin

Iran

First seen

2007

Last active

2018

Motivation

Espionage

Attribution confidence

medium

MENA targeting

Iran, regional Middle East

Sectors

Government, individuals/dissidents

Why it mattersState-sponsored / APT actor, medium confidence, documented targeting Iran, regional Middle East (Government, individuals/dissidents sectors).

What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.

Associated with

Related to

Rocket KittenactorTechnique overlap
Ferocious KittenactorTechnique overlap
Madi / MahdiactorTechnique overlap
Flying KittenactorTechnique overlap
Group5actorTechnique overlap
Duqu (Duqu 2.0)actorTechnique overlap
Dark CaracalactorTechnique overlap
Dust SpecteractorTechnique overlap
Gaza Cybergang / Molerats

Indicators

No indicators linked yet

IOC extraction runs nightly against new reporting on this actor. Check back after tomorrow's corpus refresh.

Useful?

BahamutactorTechnique overlap

Earth BogleactorTechnique overlap

SideWinderactorTechnique overlap

APT33actorTechnique overlap

WIRTEactorTechnique overlap

Imperial Kitten (CURIUM)actorTechnique overlap

APT39 / ChaferactorTechnique overlap

Tropic TrooperactorTechnique overlap

Cl0pactorTechnique overlap

Void Manticore (Storm-0842)actorTechnique overlap

HEXANE (Lyceum)actorTechnique overlap

MuddyWateractorTechnique overlap

OilRig (APT34)actorTechnique overlap

Qilin (fka Agenda)actorTechnique overlap

Uses

Data from Local SystemtechniqueATT&CK mapping
Application Layer Protocol: Web ProtocolstechniqueATT&CK mapping
Boot or Logon Autostart Execution: Registry Run Keys / Startup FoldertechniqueATT&CK mapping
User Execution: Malicious FiletechniqueATT&CK mapping
Input Capture: KeyloggingtechniqueATT&CK mapping
Ingress Tool TransfertechniqueATT&CK mapping
Phishing: Spearphishing AttachmenttechniqueATT&CK mapping