MITRE ATT&CKgroup
G0070 Dark Caracal
- Domain
- enterprise, mobile
- Version
- 1.4
- Created
- 2018-10-17
Description
Dark Caracal is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012.
Related
Uses · MITRE ATT&CK (18)
- T1027.013 Encrypted/Encoded File sub-technique
- T1437.001 Web Protocols sub-technique
- T1071.001 Web Protocols sub-technique
- T1204.002 Malicious File sub-technique
- T1059.003 Windows Command Shell sub-technique
- T1566.003 Spearphishing via Service sub-technique
- T1027.002 Software Packing sub-technique
- T1218.001 Compiled HTML File sub-technique
- T1547.001 Registry Run Keys / Startup Folder sub-technique
- S0399 Pallas software (malware)
- S0234 Bandook software (malware)
- S0235 CrossRAT software (malware)
- T1476 Deliver Malicious Application via Other Means technique
- T1189 Drive-by Compromise technique
- S0182 FinFisher software (malware)
- T1005 Data from Local System technique
- T1083 File and Directory Discovery technique
- T1113 Screen Capture technique
References
- https://info.lookout.com/rs/051-ESQ-475/images/Lookout_Dark-Caracal_srr_20180118_us_v.1.0.pdf Lookout Dark Caracal Jan 2018