Dark Caracal

Overview

Dark Caracal is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012.

Capabilities

• Custom malware/implant development — ATT&CK: 3 attributed custom malware families

TTPs — 12 techniques across 7 tactics

Tools & malware (3)

FinFisher · CrossRAT · Bandook

Reporting (1)

• Dark Caracal: Cyber-espionage at a Global Scale — Blaich, A., et al