SYMBOLCOMMON_NAMEaka. SYNONYMS

Volatile Cedar  (Back to overview)

aka: DeftTorero, Lebanese Cedar

Beginning in late 2012, a carefully orchestrated attack campaign we call Volatile Cedar has been targeting individuals, companies and institutions worldwide. This campaign, led by a persistent attacker group, has successfully penetrated a large number of targets using various attack techniques, and specifically, a custom-made malware implant codenamed Explosive.


Associated Families

There are currently no families associated with this actor.


References
2022-10-03 ⋅ Kaspersky Labs ⋅ GReAT
DeftTorero: tactics, techniques and procedures of intrusions revealed
Nightrunner Tunna ASPXSpy LaZagne ExplosiveRAT reGeorg Volatile Cedar
2021-01-28 ⋅ ClearSky ⋅ ClearSky Research Team
“Lebanese Cedar” APT Global Lebanese Espionage Campaign Leveraging Web Servers
Volatile Cedar
2015-06-09 ⋅ Check Point ⋅ Check Point
New Data: Volatile Cedar Malware Campaign
Volatile Cedar
2015-03-31 ⋅ Check Point Research ⋅ Check Point Research
Volatile Cedar - Analysis of a Global Cyber Espionage Campaign
Volatile Cedar
2015-03-31 ⋅ Kaspersky Labs ⋅ Costin Raiu, Kurt Baumgartner
Sinkholing Volatile Cedar DGA Infrastructure
Volatile Cedar
2015-03-30 ⋅ Check Point ⋅ Check Point
Volatile Cedar
Volatile Cedar

Credits: MISP Project