The elusive cyber threat actor Desert Dexter has been orchestrating a stealthy espionage campaign across the Middle East and North Africa. Hiding behind fake news groups and deceptive Facebook ads, the group spreads a modified version of AsyncRAT malware. With nearly 900 victims and evidence of advanced evasion techniques and targeting cryptocurrency wallets the scale and precision of their operations are alarming.