Fruityarmor

FruityArmor, also known as Stealth Falcon or Project Raven, is a threat actor linked to the United Arab Emirates (UAE), according to MITRE. Active since 2012, this state-sponsored hacking group is known for targeting political activists, journalists, and dissidents in the Middle East. The cybersecurity industry often uses various names interchangeably to refer to such groups, which can be comprised of individuals, companies, or government entities. In September 2023, ESET published a report detailing a new and sophisticated backdoor used by FruityArmor, named DeadGlyph. This malware represents a significant advancement in the group's capabilities, enabling them to carry out cyberespionage attacks with increased sophistication. The Deadglyph malware was attributed to Stealth Falcon, underscoring its ongoing threat activity and development of new tools for malicious purposes. New cyberespionage attacks have been launched by Stealth Falcon using the novel Deadglyph malware, as reported by SC Magazine and The Hacker News in late September 2023. These reports underscore the persistent and evolving threat posed by FruityArmor, particularly given their focus on sensitive targets such as political activists and journalists. As such, it is crucial for organizations and individuals within their target demographic to remain vigilant and implement robust cybersecurity measures.