Home / Threat actors / Dark Caracal
Dark Caracal G0070
Updated at source on Sep 2, 2026 · View on MITRE ATT&CK
0
associated CVEs
13
Techniques
3
Malware and tools
Dark Caracal is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012.
Exploited vulnerabilities
CVEs cited by MITRE ATT&CK for this group, with the source excerpt. Records not yet published here appear without a link.
ATT&CK does not cite CVEs for this group.
Techniques by tactic
Initial Access
T1189 Drive-by CompromiseT1566.003 Spearphishing via Service Execution
T1059.003 Windows Command ShellT1204.002 Malicious File Persistence
T1547.001 Registry Run Keys / Startup Folder Privilege Escalation
T1547.001 Registry Run Keys / Startup Folder Stealth
T1027.002 Software PackingT1027.013 Encrypted/Encoded FileT1218.001 Compiled HTML File Discovery
T1083 File and Directory Discovery Collection
T1005 Data from Local SystemT1113 Screen Capture Command and Control
T1071.001 Web Protocols © The MITRE Corporation. ATT&CK® content reproduced and distributed with the permission of The MITRE Corporation.