EXPLORE
Sign In
← Back to Actors

Stealth Falcon

Stealth Falcon

[Stealth Falcon](https://attack.mitre.org/groups/G0038) is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests there could be a link between this group and the United Arab Emirates (UAE) government, but that has not been confirmed. (Citation: Citizen Lab Stealth Falcon May 2016)

16
Techniques
15
Covered
1
Gaps
94%
Coverage
Coverage15/16

GAPS (1)

T1573.001Symmetric Cryptography

COVERED (15)

T1005Data from Local System51 det.T1012Query Registry25 det.T1016System Network Configuration Discovery41 det.T1033System Owner/User Discovery62 det.T1041Exfiltration Over C2 Channel32 det.T1047Windows Management Instrumentation88 det.T1053.005Scheduled Task100 det.T1057Process Discovery24 det.T1059Command and Scripting Interpreter552 det.T1059.001PowerShell384 det.T1071.001Web Protocols83 det.T1082System Information Discovery91 det.T1555Credentials from Password Stores43 det.T1555.003Credentials from Web Browsers16 det.T1555.004Windows Credential Manager9 det.