Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Lebanese Cedar
5
techniques
2
software
8,120
corpus matches
profile
Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests.
techniques
5 attributed · most-instrumented first
software
2 malware & tools attributed
Explosive
S0569
Caterpillar WebShell
S0572
read this carefully
8,120 corpus matches is not attribution
That count is indicators which exhibit techniques Volatile Cedar is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
showing 30 of 8,120
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.