NexaPulse
Subscribe
Intrusion setG0123

Volatile Cedar

Also tracked as Lebanese Cedar

Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests.

Documented techniques
5
Assessed origin
Lebanon
First seen
2012
Basis
MITRE ATT&CK

How they break in

Techniques MITRE has documented this group using, grouped by the stage of an attack they belong to. This is the actionable half: each one is a behaviour you can look for in your own logs, and a control you can test.

reconnaissance2

initial access1

persistence1

command and control1

Malware

Families MITRE records this group deploying. Detection names for these are a reasonable place to start.

Caterpillar WebShellExplosive
Source: MITRE ATT&CK View the original record · Last synchronised 2026-09-09 · Origin and motivation are read from MITRE’s own description and are not structured fields in ATT&CK. Where the text does not attribute a group, this page leaves them blank rather than guessing.