Desert Falcons is a cyber espionage group, also known by aliases such as APT-C-23, AridViper, and Two-tailed Scorpion, suspected to operate out of the Middle East, primarily Palestine, Egypt, and Turkey. This group emerged with tool development starting in 2011 and launched its main campaigns in 2013, reaching peak activity in early 2015. Desert Falcons' primary motivation is intelligence gathering and espionage, targeting political, military, and critical infrastructure sectors. The group is notable for being the first documented Arabic-speaking cyber espionage group to conduct full-scale operations using entirely custom-developed malware and proficient social engineering tactics, often tailored to local contexts and cultural insights.