Dark Caracal
Dark Caracal is a Lebanon-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 13 sectors, including Government and Manufacturing, in 31 countries, including the United States and India. It uses 24 MITRE ATT&CK techniques.
Also known as
- ATK 27
- TAG-CT3
- G0070
- Operation “Dark Caracal”
- Origin
- Lebanon
- Techniques
- 24
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2012
- Last seen
- Nov 26, 2020
- Record updated
Who They Target.
Sectors · 13
Countries · 31
Labelsespionageglobal
About Dark Caracal.
Dark Caracal is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.