Overview 9 indicators
Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests.
| domain | 7 | G0123-domain.txt |
| ipv4 | 1 | G0123.json |
| url | 1 | G0123.json |
Techniques 5 ATT&CK
Open in ATT&CK Navigator → or download the layer (5 techniques, layer 4.5)
- T1105 Ingress Tool Transfer
- T1190 Exploit Public-Facing Application
- T1505.003 Web Shell
- T1595.002 Vulnerability Scanning
- T1595.003 Wordlist Scanning
Software 2
Principal sources 3 reports
Ranked by how many of this actor's indicators each report brought in.
- 7checkpoint.com/downloads/volatile-cedar-technical-repo…
- 2securelist.com/defttorero-tactics-techniques-and-proce…
- 2otx.alienvault.com/pulse/633acb17ed56f34d3779a9a4
Timeline 9 indicators
Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.
9 shown
No indicator matches. Only the most recent 300 are on this page — the rest are in the JSON.
-
securelist.com/defttorero-tactics-techniques-and-proce… · otx.alienvault.com/pulse/633acb17ed56f34d3779a9a4
ipv4 200.159.87.196:3306 url http://200.159.87.196 -
checkpoint.com/downloads/volatile-cedar-technical-repo…
carima2012.site90.com dotnetexplorer.info dotntexplorere.info erdotntexplore.info explorerdotnt.info saveweb.wink.ws xploreredotnet.info
Further reading 6
- attack.mitre.org/groups/G0123
- media.kasperskycontenthub.com/wp-content/uploads/sites/43/2015/03/200…
- clearskysec.com/wp-content/uploads/2021/01/Lebanese-Ced…
- otx.alienvault.com/pulse/633acb17ed56f34d3779a9a4
- securelist.com/defttorero-tactics-techniques-and-proce…
- checkpoint.com/downloads/volatile-cedar-technical-repo…