Threat actor · all actors
Dark CaracalG0070 state
🌍 LB
aka Dark Caracal, G0070
Last updated: 2026-08-20
0attributed CVEs
19ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[Dark Caracal](https://attack.mitre.org/groups/G0070) is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012. (Citation: Lookout Dark Caracal Jan 2018)
Source: MITRE ATT&CK
Names & naming systems
Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.
MITRE ATT&CKG-number catalogue id
G0070
Unclassifiedno scheme matched
Dark Caracal
How we know this
- Data origin
- MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
- Techniques
- MITRE ATT&CK STIX mappings — 19 ATT&CK techniques on file.
- Named victims
- None on file.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
T1005Data from Local System ↗T1027Obfuscated Files or Information ↗T1027.002Software Packing ↗T1027.013Encrypted/Encoded File ↗T1059Command and Scripting Interpreter ↗T1059.003Windows Command Shell ↗T1071Application Layer Protocol ↗T1071.001Web Protocols ↗T1083File and Directory Discovery ↗T1113Screen Capture ↗T1189Drive-by Compromise ↗T1204User Execution ↗T1204.002Malicious File ↗T1218System Binary Proxy Execution ↗T1218.001Compiled HTML File ↗T1547Boot or Logon Autostart Execution ↗T1547.001Registry Run Keys / Startup Folder ↗T1566Phishing ↗T1566.003Spearphishing via Service ↗
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-3 | 15 / 19 | 79% |
SI-4 | 14 / 19 | 74% |
CM-2 | 11 / 19 | 58% |
CM-6 | 11 / 19 | 58% |
CA-7 | 9 / 19 | 47% |
SI-7 | 9 / 19 | 47% |
AC-4 | 8 / 19 | 42% |
CM-7 | 8 / 19 | 42% |
SC-7 | 8 / 19 | 42% |
SI-2 | 7 / 19 | 37% |
AC-6 | 6 / 19 | 32% |
SI-10 | 6 / 19 | 32% |
AC-2 | 5 / 19 | 26% |
AC-3 | 5 / 19 | 26% |
SC-44 | 4 / 19 | 21% |
Co-occurring actors
None.
Similar actors
Same nation-state
- Volatile Cedar 1.00
- POLONIUM 1.00
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00