CYBERSECURITYTRACKER
Permanent story citation

Iranian Hacking Group Found Hosting C2 Infrastructure in the US

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 11077

As cited

Copy frozen at (site build).

threat intel

Iranian Hacking Group Found Hosting C2 Infrastructure in the US

Researchers discovered that an Iranian hacking group known as the Prince of Persia was operating command and control (C2) infrastructure from servers located in the United States. The group has been conducting a stealthy malware campaign targeting organizations globally.

Why it matters: Organizations worldwide may be targeted by this Iranian threat actor; defenders should monitor for command and control traffic to US-based infrastructure and assess whether their networks show indicators of compromise from this campaign.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Iranian Hacking Group Found Hosting C2 Infrastructure in the US

Researchers discovered that an Iranian hacking group known as the Prince of Persia was operating command and control (C2) infrastructure from servers located in the United States. The group has been conducting a stealthy malware campaign targeting organizations globally.

Why it matters: Organizations worldwide may be targeted by this Iranian threat actor; defenders should monitor for command and control traffic to US-based infrastructure and assess whether their networks show indicators of compromise from this campaign.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary