Project Raven is a UAE government offensive-surveillance program, exposed by Reuters in 2019, staffed partly by former U.S. NSA/intelligence operators and run under the DarkMatter umbrella, that used the zero-click Karma iOS exploit to spy on rival governments, dissidents, journalists, and human-rights activists. Sourcing is investigative-journalism-based, not vendor-technical.
Project Raven was revealed in a January 2019 Reuters investigation describing a clandestine UAE offensive-cyber unit that employed former U.S. National Security Agency and intelligence contractors, operating in coordination with Emirati security services and linked to the cybersecurity firm DarkMatter. Attribution to the UAE is well supported by the reporting and by a subsequent 2021 U.S. Department of Justice deferred-prosecution agreement against three former operators, but it is important to flag that this entry is journalism- and court-document-sourced rather than backed by a vendor technical malware report, and it has no MITRE Group ID.
The program's signature capability was 'Karma', a zero-click iOS exploitation tool that could compromise iPhones and harvest messages, photos, location, and credentials without any user interaction — an advanced capability used to target a wide range of individuals. Operators also conducted broader surveillance and network operations against designated targets.
MENA relevance is central and regional-political. Reuters reported Karma and Raven operations against the governments of Qatar, Iran, and Turkey, as well as against Emirati and regional dissidents, human-rights activists, journalists (including regional media figures), and political rivals — surveillance aligned with UAE state interests during Gulf rivalries and the Qatar diplomatic crisis. This makes Project Raven a leading example of a Gulf-state offensive program, distinct from the espionage-for-hire and Iranian clusters dominating the region.
Following the 2019 exposure and the 2021 DOJ action (which barred the operators from certain activities), Project Raven under this name is assessed as dormant, though UAE offensive-cyber and commercial-surveillance interests persist through other vehicles. It is included with an explicit journalism-sourced flag and as a rare Gulf-origin state program.