EXPLORE
Sign In
← Back to Actors

Stealth Falcon

Stealth Falcon

[Stealth Falcon](https://attack.mitre.org/groups/G0038) is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests there could be a link between this group and the United Arab Emirates (UAE) government, but that has not been confirmed. (Citation: Citizen Lab Stealth Falcon May 2016)

16
Techniques
15
Covered
1
Gaps
94%
Coverage
Coverage15/16

GAPS (1)

T1573.001Symmetric Cryptography

COVERED (15)

T1005Data from Local System46 det.T1012Query Registry22 det.T1016System Network Configuration Discovery35 det.T1033System Owner/User Discovery59 det.T1041Exfiltration Over C2 Channel30 det.T1047Windows Management Instrumentation85 det.T1053.005Scheduled Task82 det.T1057Process Discovery18 det.T1059Command and Scripting Interpreter462 det.T1059.001PowerShell338 det.T1071.001Web Protocols74 det.T1082System Information Discovery80 det.T1555Credentials from Password Stores38 det.T1555.003Credentials from Web Browsers15 det.T1555.004Windows Credential Manager8 det.