Threat actor · all actors
Stealth FalconG0038 state
🇦🇪 AE
aka Stealth Falcon, FruityArmor, G0038
Last updated: 2026-07-03
0attributed CVEs
19ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[Stealth Falcon](https://attack.mitre.org/groups/G0038) is a threat group that has conducted targeted spyware attacks against Emirati journalists, activists, and dissidents since at least 2012. Circumstantial evidence suggests there could be a link between this group and the United Arab Emirates (UAE) government, but that has not been confirmed. (Citation: Citizen Lab Stealth Falcon May 2016)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-4 | 13 / 19 | 68% |
CM-2 | 10 / 19 | 53% |
CM-6 | 10 / 19 | 53% |
CM-7 | 9 / 19 | 47% |
SI-3 | 9 / 19 | 47% |
AC-3 | 8 / 19 | 42% |
AC-6 | 8 / 19 | 42% |
AC-2 | 7 / 19 | 37% |
CA-7 | 7 / 19 | 37% |
AC-4 | 5 / 19 | 26% |
AC-5 | 5 / 19 | 26% |
CM-5 | 5 / 19 | 26% |
IA-2 | 5 / 19 | 26% |
RA-5 | 5 / 19 | 26% |
SC-7 | 5 / 19 | 26% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- Frankenstein 0.35
- Juicy Mix 0.32
- Inception 0.26
- APT37 0.23
- Higaisa 0.22
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00