Volatile Cedar (G0123) | Threat Actor Index

Techniques

Toolsets

CVEs Referenced

KEV Entries

CISA Known Exploited

About Volatile Cedar

Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests.

View MITRE record ↗

Techniques by Tactic (5)

Reconnaissance

T1595.002 Vulnerability ScanningT1595.003 Wordlist Scanning

Initial Access

T1190 Exploit Public-Facing Application

Persistence

T1505.003 Web Shell

Command & Control

T1105 Ingress Tool Transfer

Toolsets (2)

🐛

Caterpillar WebShell S0572

Malware · Windows

🐛

Explosive S0569

Malware · Windows

CVEs Referenced (2 · 1 CISA KEV)

CVE-2014-7169View full details on NVDKEV

CVE-2016-6662View full details on NVD

References & Reports (2)

ClearSky Cyber Security. (2021, January). “Lebanese Cedar” APT Global Lebanese Espionage Campaign Leveraging Web Servers. Retrieved February 10, 2021.
Threat Intelligence and Research. (2015, March 30). VOLATILE CEDAR. Retrieved February 8, 2021.

↑