Dark Caracal is a threat actor attributed to LB, also known as TAG-CT3, G0070, ATK 27. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does Dark Caracal exploit?

Dark Caracal is known to exploit 1 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

Dark Caracal

Also known as: TAG-CT3, G0070, ATK 27

LBInformation theft and espionage

Exploited CVEs

Overview

Lookout and Electronic Frontier Foundation (EFF) have discovered Dark Caracal, a persistent and prolific actor, who at the time of writing is believed to be administered out of a building belonging to the Lebanese General Security Directorate in Beirut. At present, we have knowledge of hundreds of gigabytes of exfiltrated data, in 21+ countries, across thousands of victims. Stolen data includes enterprise intellectual property and personally identifiable information.

Exploited Vulnerabilities

CVE ID	Action
CVE-2017-8625	View Details