Threat Actor
Stealth Falcon
- First Reported
- Jul 21, 2026
- Latest Reported
- Jul 21, 2026
Reported Context (1)
- Previously reported by Check Point as using the CVE-2025-33053 working-directory abuse technique; the exposed workspace appeared to reproduce or adapt that technique. The article does not attribute the workspace to Stealth Falcon. Exposed WebDAV Server Reveals Malware Delivery Lab and Phishing Campaigns
CVE (1)
Malware (1)
MITRE ATT&CK (15)
Products (1)
Tools (2)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.