Dark Caracal
Threat actorAttributed to Lebanon by MITRE ATT&CK (source). An attribution, not a proven fact.
Known techniques
- T1005Data from Local System
- T1027.002Software Packing
- T1027.013Encrypted/Encoded File
- T1059.003Windows Command Shell
- T1071.001Web Protocols
- T1083File and Directory Discovery
- T1113Screen Capture
- T1189Drive-by Compromise
- T1204.002Malicious File
- T1218.001Compiled HTML File
- T1547.001Registry Run Keys / Startup Folder
- T1566.003Spearphishing via Service
Malware and tools used
Source: MITRE ATT&CKRecent news
No stories yet.