EXPLORE
Sign In
← Back to Actors

Stealth Falcon

Stealth Falcon

[Stealth Falcon](https://attack.mitre.org/groups/G0038) is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests there could be a link between this group and the United Arab Emirates (UAE) government, but that has not been confirmed. (Citation: Citizen Lab Stealth Falcon May 2016)

16
Techniques
15
Covered
1
Gaps
94%
Coverage
Coverage15/16

GAPS (1)

T1573.001Symmetric Cryptography

COVERED (15)

T1005Data from Local System47 det.T1012Query Registry25 det.T1016System Network Configuration Discovery40 det.T1033System Owner/User Discovery61 det.T1041Exfiltration Over C2 Channel32 det.T1047Windows Management Instrumentation88 det.T1053.005Scheduled Task100 det.T1057Process Discovery21 det.T1059Command and Scripting Interpreter514 det.T1059.001PowerShell372 det.T1071.001Web Protocols81 det.T1082System Information Discovery86 det.T1555Credentials from Password Stores41 det.T1555.003Credentials from Web Browsers16 det.T1555.004Windows Credential Manager9 det.