Volatile Cedar
threat actorLB01
also known as
Other names and identifiers for this entity.
MISP
DeftTorero · Lebanese Cedar · Volatile Cedar
Beginning in late 2012, a carefully orchestrated attack campaign we call Volatile Cedar has been targeting individuals, companies and institutions worldwide. This campaign, led by a persistent attacker group, has successfully penetrated a large number of targets using various attack techniques, and specifically, a custom-made malware implant codenamed Explosive.
02
references
External citations — patches, advisories, analysis.
- https://blog.checkpoint.com/2015/03/31/volatilecedar/
- https://blog.checkpoint.com/2015/06/09/new-data-volatile-cedar/
- https://securelist.com/sinkholing-volatile-cedar-dga-infrastructure/69421/
- https://www.clearskysec.com/wp-content/uploads/2021/01/Lebanese-Cedar-APT.pdf
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/03/20082004/volatile-cedar-technical-report.pdf
- https://securelist.com/defttorero-tactics-techniques-and-procedures/107610/