Stealth Falcon — Threat Actor Profile, Campaigns & Targets

Threat entity extracted from intelligence sources

Frequency
13
occurrences
First Seen
November 7, 2025
Last Seen
July 20, 2026

Related Threat Clusters

  • Exposed Malware Delivery Lab Reveals AI-Driven Phishing Operations

    An exposed server functioning as a malware delivery lab was discovered following an MDR alert. The lab contained over 1,000 artifacts, showcasing how attackers are leveraging generative AI for rapid lure generation and…

    2 articles · Updated July 20, 2026
  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    A sophisticated spyware named 'Landfall' targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image-processing library. Discovered by Palo Alto Networks' Unit 42, the…

    15 articles · Updated November 12, 2025
  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    A sophisticated spyware named Landfall targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability in Samsung's image processing library. Discovered by Palo Alto Networks' Unit 42, the malware…

    37 articles · Updated November 12, 2025
  • Landfall Spyware Exploits Samsung Galaxy Zero-Day Vulnerability

    Landfall, a sophisticated Android spyware, targeted Samsung Galaxy phones for nearly a year, exploiting a zero-day vulnerability (CVE-2025-21042) in Samsung's image-processing library. The campaign, uncovered by Palo…

    47 articles · Updated November 10, 2025
  • Microsoft Issues Mitigations for 1,246 Vulnerabilities in 2025

    In 2025, Microsoft addressed a total of 1,246 Common Vulnerabilities and Exposures (CVEs), with 158 classified as critical. Among these, 41 were zero-day vulnerabilities, and a significant portion, 38.3%, were related…

    1 article · Updated December 30, 2025

Recent Intelligence Reports

  • Inside an Exposed Malware Delivery Lab: OPSEC Failures Behind a WebDAV Phishing Operation — Rapid7 · July 20, 2026
  • Inside an Exposed Malware Delivery Lab: OPSEC Failures Behind a WebDAV Phishing Operation — Rapid7 · July 20, 2026
  • Patch Tuesday 2025 roundup: The biggest Microsoft vulnerabilities of the year — Csoonline · December 30, 2025
  • Commercial spyware targeted Samsung Galaxy users for months — Itnews.Au · November 10, 2025
  • CISA orders feds to patch Samsung zero — Bleepingcomputer · November 10, 2025
  • Novel LANDFALL Android spyware exploits Samsung zero-day — Scworld · November 10, 2025
  • Galaxy Users Were Secretly Targeted For 10 Months Through A Zero-Day Flaw, Says Report — Thedailyjagran · November 10, 2025
  • Hackers Breach Samsung Galaxy Phones Using A Single WhatsApp Image In Sophisticated ... — Linkedin · November 9, 2025

CVSS v3.1 Breakdown