EXPLORE
Sign In
← Back to Actors

Stealth Falcon

Stealth Falcon

[Stealth Falcon](https://attack.mitre.org/groups/G0038) is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests there could be a link between this group and the United Arab Emirates (UAE) government, but that has not been confirmed. (Citation: Citizen Lab Stealth Falcon May 2016)

16
Techniques
15
Covered
1
Gaps
94%
Coverage
Coverage15/16

GAPS (1)

T1573.001Symmetric Cryptography

COVERED (15)

T1005Data from Local System47 det.T1012Query Registry24 det.T1016System Network Configuration Discovery39 det.T1033System Owner/User Discovery61 det.T1041Exfiltration Over C2 Channel31 det.T1047Windows Management Instrumentation87 det.T1053.005Scheduled Task99 det.T1057Process Discovery20 det.T1059Command and Scripting Interpreter486 det.T1059.001PowerShell368 det.T1071.001Web Protocols80 det.T1082System Information Discovery86 det.T1555Credentials from Password Stores40 det.T1555.003Credentials from Web Browsers16 det.T1555.004Windows Credential Manager9 det.