Prince of Persia APT hosts C&C in US for first time since 2016
After a three-month pause, Tonnerre stole more than 1,800 files from one victim within a week of the May 27 restart.
68
Organization
Semperis
- Mentions · 7d0
- Mentions · 30d11
- All mentions12
- First seenSep 22, 2026
- Last mentioned19d ago
Timeline
12 articles · newest firstPrince of Persia found hosting command-and-control servers in the US
Semperis traced Tornado malware to a US host after the group appeared quiet following February strikes on Iran.
58
Ransomware crews threatened employees' families at 37% of surveyed firms
Semperis surveyed 1,200 professionals at organizations already hit; 59% paid and 87% saw identity systems targeted.
54
Cybercrims go beyond stealing data to attack physical building systems
Cybercriminals are disrupting building systems, from French grocery refrigeration to a Canadian hospital, to extort victims with physical harm.
76
Ransomware Gangs Increasingly Turn to Threats of Physical Violence to Extort Payments
Semperis says ransomware gangs increasingly threaten staff with violence, doxxing and swatting to force payment.
58
Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Semperis survey finds 37% of successful ransomware attacks included threats against employees' friends or relatives.
61
Ransomware extortion gets personal as attackers target employees’ families
Semperis survey finds ransomware crews increasingly threaten employees’ families, with 84% of victims reporting AI-involved attacks.
74
Ransomware Attacks Intensify: Criminals Shift Focus to Target Employees and Their Families
Semperis says 37% of successful ransomware attacks included threats against employees’ friends or relatives.
74
AI Used in 84% of Ransomware Attacks as Identity Infrastructure Comes Under Fire.
Semperis survey of 1,200 ransomware victims finds AI in 84% of incidents and identity systems widely targeted.
64
Ransomware gets personal: 'We-know-where-you-are kind of stuff'
Semperis survey finds 37% of ransomware cases include psychological or physical threats against staff and families.
66
Ransomware Gangs Embrace Physical Threats, Family Stalking?
Dark Reading says Semperis claims of ransomware-linked violence and family stalking remain unverified.
50
Top 10 Best Identity Threat Detection & Response (ITDR) Tools in 2026 [Ranked & Scored]
Ranked review of ten ITDR tools scores Microsoft Defender for Identity first, with CrowdStrike Falcon and Silverfort completing the podium for identity threat detection.
15
Appears with
- Microsoftvendor · 4
- Oktavendor · 3
- Semperisvendor · 3
- Active Directoryproduct · 3
- FBIorganization · 2
- Tornadomalware · 2
- Prince of Persiathreat actor · 2
- Entra IDproduct · 2
- Tonnerremalware · 2
- Oktaproduct · 2
- Microsoftorganization · 2
- BeyondTrustorganization · 1
- Infythreat actor · 1
- Silverfortorganization · 1
- Las Vegas casinosvictim · 1
- SentinelOneorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.