Volatile Cedar
Also reported as VolcanicTimber, Amethyst Rain, Lebanese Cedar, Dancing Salome and DeftTorero. Linked to Lebanon by four sources.
Reports per quarter
Techniques seen in the last two years
- T1555.003 1 report reports only
Counts come from technique IDs in the actor's report text. “Reports only” means reports name the technique but MITRE ATT&CK® does not list it for this actor.
Also listed by ATT&CK
CVEs named in reports
- CVE-2012-3152 KEV
- CVE-2016-4117 KEV ransomware
- CVE-2019-11581 KEV
- CVE-2019-3396 KEV ransomware
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens a link whose publisher is not confirmed. Archived copy on ORKL Detailsfor LaZagne (Malware Family)
-
The Israel-Hamas War | Cyber Domain State-Sponsored Activity of Interest
The title opens Wayback Machine, not the publisher’s page. Archived copy on ORKL Detailsfor The Israel-Hamas War | Cyber Domain State-Sponsored Activity of Interest
-
DeftTorero- tactics, techniques and procedures of intrusions revealed
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor DeftTorero- tactics, techniques and procedures of intrusions revealed
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Lebanese-Cedar-APT
Show all 17 reports Show fewer
-
New Data- Volatile Cedar Malware Campaign
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor New Data- Volatile Cedar Malware Campaign
-
Volatile Cedar - Analysis of a Global Cyber Espionage Campaign
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Volatile Cedar - Analysis of a Global Cyber Espionage Campaign
-
Sinkholing Volatile Cedar DGA Infrastructure
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Sinkholing Volatile Cedar DGA Infrastructure
-
Volatile Cedar Threat Intelligence And Research
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Volatile Cedar Threat Intelligence And Research
Newest first. Details opens the report in Explore.