Volatile Cedar
Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests.
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--b2e34388-6938-4c59-a702-80dc219e15e3
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T12:34:03+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (5)
Adversaries may attempt to exploit a weakness in an Internet-facing host or system to initially access a network. The weakness in the system can be a
Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external ad
Adversaries may scan victims for vulnerabilities that can be used during targeting. Vulnerability scans typically check if the configuration of a targ
Adversaries may backdoor web servers with web shells to establish persistent access to systems. A Web shell is a Web script that is placed on an openl
Adversaries may iteratively probe infrastructure using brute-forcing and crawling techniques. While this technique employs similar methods to [Brute F
Software & Tools (2)
Caterpillar WebShell is a self-developed Web Shell tool created by the group [Volatile Cedar](https://attac
Explosive is a custom-made remote access tool used by the group [Volatile Cedar](https://attack.mitre.org/g
Explore this actor's full graph with Ninja Signal