AEUnited Arab Emiratesconfidence: 50G0038

Stealth FalconStealth Falcon

Also known as: FruityArmor · G0038 · Stealth Falcon

Origin
AE
Known aliases
3
Target sectors
1
Attribution
State-sponsored

Profile

Stealth Falcon is a threat actor (origin AE) catalogued by MISP-Galaxy (MISP-Galaxy v341). The group is also tracked as FruityArmor, G0038. Operational targeting focuses on the Civil society sector. Documented victim organisations include United Arab Emirates, United Kingdom. Original record: This threat actor targets civil society groups and Emirati journalists, activists, and dissidents.

Aliases· 3

FruityArmorStealth Falcon
G0038

Target sectors· 1

Civil society

Known victims· 2

  • United Arab Emirates
  • United Kingdom

MITRE ATT&CK Group crosswalk

G0038

References

  1. https://citizenlab.ca/2016/05/stealth-falcon/
  2. https://www.cfr.org/interactive/cyber-operations/stealth-falcon
  3. https://securelist.com/cve-2019-0797-zero-day-vulnerability/89885/
  4. https://attack.mitre.org/groups/G0038/

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

Actor
Stealth Mango and Tangelo
Actor
Flying Kitten
Actor
BladeHawk
Group
Gallmaker
Actor
APT39
Actor
Thrip
Sourced from MISP-Galaxy Threat Actor cluster. Curated by Adam Lundqvist, Founder at SQUR.