Stealth Falcon

Stealth Falcon is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests a possible link between this group and the United Arab Emirates (UAE) government, but this has not been confirmed.

Other names for this threat

FruityArmor

This is a collection of rules based on the presence of indicators of compromise publicly reported as associated with this malicious actor.