Desert Falcons

Desert Falcons, also known as APT-C-23, Arid Viper, or Two-tailed Scorpion, is a threat actor group associated with cyber espionage activities that have been ongoing since at least 2013. This group has targeted countries in the Middle East and has shown links to the Gaza Cybergang Group2, which is known for its medium-level sophistication. The Desert Falcons have been tracked under various names by different cybersecurity firms, such as TAG-63 by Recorded Future, indicating the complexity of their operations and their significant presence in the world of cyber threats. The group's activities have been documented in several publications, including reports detailing their targeted attacks. Their tactics, techniques, and procedures (TTPs) are analyzed, providing insight into their modus operandi. Furthermore, there is evidence of connections to other threat groups, like Operation Parliament (Group3), highlighting the interconnectedness of these malicious entities in the cyber landscape. Desert Falcons demonstrated a peak of activity towards the end of 2017 and the beginning of 2018, suggesting an escalation in their operations during this period. More information on the group's activities and their connections to other threat actors will be presented in future publications. Given their history and the potential for future threats, continued monitoring and analysis of the Desert Falcons' activities are essential for maintaining cybersecurity.