New Research Highlights Sophisticated Nation-State Cyber Activity Focused on Identity Infrastructure

Recent research from Semperis has uncovered activity linked to an Iranian state-sponsored threat group known as Prince of Persia, drawing attention to the growing role of identity-focused attacks in modern cyber operations.

According to the findings, the group has been operating command-and-control infrastructure designed to support long-term cyber campaigns. The research highlights an important shift in the threat landscape: attackers are increasingly targeting identity systems and privileged access rather than focusing solely on endpoints or data.

For organizations, this serves as a reminder that identity infrastructure, including Active Directory, Entra ID, and privileged accounts, has become a critical battleground in cybersecurity. Once identities are compromised, attackers can move laterally, escalate privileges, and maintain persistence while remaining difficult to detect.

The research also underscores the importance of adopting a comprehensive cyber resilience strategy that includes identity protection, continuous monitoring, incident response readiness, and the ability to recover trusted identity services after an attack.

Organizations should assume that identity systems are a high-value target and ensure they are adequately protected and recoverable.

Read more from Semperis:
https://www.semperis.com/blog/prince-of-persia-threat-group-hiding-in-plain-sight/

#CyberSecurity #CyberResilience #IdentitySecurity #ActiveDirectory #IAM #CyberRecovery #Semperis #ThreatIntelligence #IdentityResilience #CyberDefense #Cohesity