Prince of Persia Resumes Data Theft, Uses U.S.-Hosted Command Server
Semperis reports that the Iran-linked Prince of Persia (Infy) threat group resumed data theft in 2026 after a confirmed three-month pause and used a U.S.-hosted command-and-control server for the first time since 2016. While the report identifies no procurement opportunity, it gives agencies and contractors a reason to review indicators of compromise and account for threats operating through shared commercial infrastructure.