{
  "id": "volatile-cedar",
  "name": "Volatile Cedar",
  "aliases": [
    "Lebanese Cedar"
  ],
  "domain": "cyber",
  "country": "LBN",
  "category": "Suspected state-linked cyber threat group",
  "status": "tracked",
  "fielded": null,
  "operators": [
    "LBN"
  ],
  "summary": "Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Lebanese group",
      "src": [
        "mitre-g0123"
      ],
      "conf": "medium"
    },
    {
      "k": "active_since",
      "v": 2012,
      "src": [
        "mitre-g0123"
      ],
      "conf": "medium",
      "note": "At least 2012"
    },
    {
      "k": "attack_id",
      "v": "G0123",
      "src": [
        "mitre-g0123"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide.",
      "src": [
        "mitre-g0123"
      ],
      "conf": "medium"
    },
    {
      "k": "techniques_count",
      "v": 5,
      "src": [
        "mitre-g0123"
      ],
      "conf": "high",
      "note": "ATT&CK v20.1"
    },
    {
      "k": "software",
      "v": "Caterpillar WebShell, Explosive",
      "src": [
        "mitre-g0123"
      ],
      "conf": "high",
      "note": "2 malware and tool entries linked in ATT&CK"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "notes": "Volatile Cedar is a Lebanese threat group that has targeted individuals, companies, and institutions worldwide. Volatile Cedar has been operating since 2012 and is motivated by political and ideological interests. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.",
  "changelog": [
    {
      "date": "2026-11-08",
      "change": "Entry created from MITRE ATT&CK Enterprise v20.1 (group G0123)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/volatile-cedar.html",
  "sources": {
    "mitre-g0123": {
      "title": "Volatile Cedar, Group G0123",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0123/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-11-08"
    }
  }
}