Dark Caracal

threat actorLB
01

also known as

Other names and identifiers for this entity.

ATT&CK

Dark Caracal

MISP

Dark Caracal

Lookout and Electronic Frontier Foundation (EFF) have discovered Dark Caracal, a persistent and prolific actor, who at the time of writing is believed to be administered out of a building belonging to the Lebanese General Security Directorate in Beirut. At present, we have knowledge of hundreds of gigabytes of exfiltrated data, in 21+ countries, across thousands of victims. Stolen data includes enterprise intellectual property and personally identifiable information.

02

resolved ATT&CK groups

Threat groups associated with this.

03

techniques used (14)

ATT&CK techniques this enables or maps to.

04

software used (4)

Malware and tools associated with this.

05

references

External citations — patches, advisories, analysis.