SYMBOLCOMMON_NAMEaka. SYNONYMS

Stealth Falcon  (Back to overview)

aka: FruityArmor, G0038

This threat actor targets civil society groups and Emirati journalists, activists, and dissidents.

Associated Families

There are currently no families associated with this actor.

References
2019-03-13 ⋅ Kaspersky Labs ⋅ Vasily Berdnikov, Boris Larin
@online{berdnikov:20190313:fourth:98b1131, author = {Vasily Berdnikov and Boris Larin}, title = {{The fourth horseman: CVE-2019-0797 vulnerability}}, date = {2019-03-13}, organization = {Kaspersky Labs}, url = {https://securelist.com/cve-2019-0797-zero-day-vulnerability/89885/}, language = {English}, urldate = {2019-12-20} } The fourth horseman: CVE-2019-0797 vulnerability
Stealth Falcon
2019 ⋅ MITRE ⋅ MITRE ATT&CK
@online{attck:2019:stealth:5d9f9cd, author = {MITRE ATT&CK}, title = {{Group description: Stealth Falcon}}, date = {2019}, organization = {MITRE}, url = {https://attack.mitre.org/groups/G0038/}, language = {English}, urldate = {2019-12-20} } Group description: Stealth Falcon
Stealth Falcon
2019 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
@online{tracker:2019:stealth:b8516f4, author = {Cyber Operations Tracker}, title = {{Stealth Falcon}}, date = {2019}, organization = {Council on Foreign Relations}, url = {https://www.cfr.org/interactive/cyber-operations/stealth-falcon}, language = {English}, urldate = {2019-12-20} } Stealth Falcon
Stealth Falcon
2016-05-29 ⋅ CitizenLab ⋅ Bill Marczak, John Scott-Railton
@online{marczak:20160529:keep:8f48d9e, author = {Bill Marczak and John Scott-Railton}, title = {{Keep Calm and (Don’t) Enable Macros: A New Threat Actor Targets UAE Dissidents}}, date = {2016-05-29}, organization = {CitizenLab}, url = {https://citizenlab.ca/2016/05/stealth-falcon/}, language = {English}, urldate = {2020-04-06} } Keep Calm and (Don’t) Enable Macros: A New Threat Actor Targets UAE Dissidents
Stealth Falcon
Credits: MISP Project