ESET researchers discovered a new malware associated with the Stealth Falcon APT group that abuses the Windows BITS service to stealthy exfiltrate data. The malware analyzed by ESET, dubbed Win32/StealthFalcon, collect data and send to its C&C servers using the Windows Background Intelligent Transfer Service (BITS) service. Amnesty Internationals Senior Technologist, Claudio Guarnieri, has concluded that Stealth Falcon and Project Raven actually are the threat actor.”]
Source: https://securityaffairs.co/wordpress/91019/apt/stealth-falcon-backdoor-bits.html