Free scan↗
  • English
  • Deutsch

Stealth Falcon

threat actorAE
01

also known as

Other names and identifiers for this entity.

ATT&CK

Stealth Falcon

MISP

FruityArmor · Stealth Falcon

This threat actor targets civil society groups and Emirati journalists, activists, and dissidents.

02

resolved ATT&CK groups

Threat groups associated with this.

  • G0038Stealth Falcon
03

techniques used (16)

ATT&CK techniques this enables or maps to.

  • T1005Data from Local System
  • T1012Query Registry
  • T1016System Network Configuration Discovery
  • T1033System Owner/User Discovery
  • T1041Exfiltration Over C2 Channel
  • T1047Windows Management Instrumentation
  • T1053.005Scheduled Task
  • T1057Process Discovery
  • T1059Command and Scripting Interpreter
  • T1059.001PowerShell
  • T1071.001Web Protocols
  • T1082System Information Discovery
  • T1555Credentials from Password Stores
  • T1555.003Credentials from Web Browsers
  • T1555.004Windows Credential Manager
  • T1573.001Symmetric Cryptography
04

references

External citations — patches, advisories, analysis.

  • https://citizenlab.ca/2016/05/stealth-falcon/↗
  • https://www.cfr.org/interactive/cyber-operations/stealth-falcon↗
  • https://securelist.com/cve-2019-0797-zero-day-vulnerability/89885/↗
  • https://attack.mitre.org/groups/G0038/↗
by temnirPrivacySources
Built in Europe© 2026 datadir s.r.o.
v0.1.142checking…