Daffodil Gust

Aliases: Stealth Falcon, Fruity Armor, Project Raven

First seen
2016-01-01 00:00:00
Primary motivation
espionage
Sophistication
advanced
Resource level
government
Actor type
nation-state
Last IoC activity
2026-07-21 00:43:42
Profile updated
2026-07-07 12:29:04

Targeted industries: government-and-public-sector technology-and-telecommunications media-and-entertainment

Targeted regions: country_code:sa country_code:qa country_code:eg

Context

Microsoft threat actor profile. Origin/Threat: United Arab Emirates.

Reports & references

  • raw.githubusercontent.com — Microsoftmapping (report)

External references