SYMBOLCOMMON_NAMEaka. SYNONYMS

Stealth Falcon  (Back to overview)

aka: FruityArmor, G0038

This threat actor targets civil society groups and Emirati journalists, activists, and dissidents.

Associated Families
win.horus
References
2025-06-10 ⋅ Check Point Research ⋅ Check Point Research
CVE-2025-33053, Stealth Falcon and Horus: A Saga of Middle Eastern Cyber Espionage
Horus
2019-03-13 ⋅ Kaspersky Labs ⋅ Boris Larin, Vasily Berdnikov
The fourth horseman: CVE-2019-0797 vulnerability
Stealth Falcon
2019-01-01 ⋅ MITRE ⋅ MITRE ATT&CK
Group description: Stealth Falcon
Stealth Falcon
2019-01-01 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
Stealth Falcon
Stealth Falcon
2016-05-29 ⋅ CitizenLab ⋅ Bill Marczak, John Scott-Railton
Keep Calm and (Don’t) Enable Macros: A New Threat Actor Targets UAE Dissidents
Stealth Falcon
Credits: MISP Project