#
Introduction
Hello fellow researcher! In this blogpost, we are going to do a deep analysis of CVE-2025-33053. How this simple yet sneaky tactic was/is being used by APT Group Stealth Falcon. Stealth Falcon, also known as Project Raven, G0038, and FruityArmor, is a cyberespionage group linked to the United Arab Emirates (UAE). They have been active since at least 2012, targeting political activists, journalists, and dissidents primarily in the Middle East, including the UAE, as well as individuals and entities in countries like the Netherlands, Saudi Arabia, Thailand, and the United Kingdom.