HOMETHREATSStealth Falcon
APT / THREAT GROUP🕵️ ESPIONAGE

Stealth Falcon

🇦🇪AE-attributed
1
campaigns
3
aliases
Last seen:Mar 17, 2026

Intelligence Profile

[Stealth Falcon](https://attack.mitre.org/groups/G0038) is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests there could be a link between this group and the United Arab Emirates (UAE) government, but that has not been confirmed. (Citation: Citizen Lab Stealth Falcon May 2016)

Threat Analysis

Stealth Falcon is a known-sophistication threat actor attributed to AE, engaged in cyber operations with a primary motivation of espionage.

The group's espionage-oriented operations suggest a state-sponsored or state-aligned mandate, typically focused on stealing intellectual property, government secrets, or military intelligence. Targets are usually selected for strategic value rather than financial gain.

Known Campaigns

Stealth Falcon — Active Operations March 2026

Stealth Falcon is a unknown-motivation threat actor attributed to AE. This threat actor targets civil society groups and Emirati journalists, activists, and dissidents....

ACTIVEMEDIUM2026

External References

Quick Facts

TypeAPT / Threat Group
Motivation🕵️ espionage
Origin🇦🇪 AE
Aliases3
SourceMalpedia

Also Known As

Stealth FalconFruityArmorG0038

Research Links

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.