Threat actors
Every actor CyberSIXT, MITRE ATT&CK and the MISP Galaxy know, reconciled. A row opens the actor's page when CyberSIXT covers it, its Atlas view otherwise.
| Actor | Origin | Motivation | CVEs | In KEV | Techniques | Software | Sources |
|---|---|---|---|---|---|---|---|
| POLONIUMPlaid Rain, UNC4453, GREATRIFT, INCENDIARY JACKAL | Lebanon | Espionage | – | – | 7 | 2 | ATT&CK G1005 · MISP Galaxy |
| Dark CaracalDark Caracal is threat group that has been attributed to the Lebanese General Directorate of General Security (GDGS) and has operated since at least 2012. | Lebanon | – | – | – | 14 | 4 | CyberSIXT · ATT&CK G0070 · MISP Galaxy |
ATT&CK © 2026 The MITRE Corporation, reproduced with its permission. MISP Galaxy under CC0. Every link between an actor and a CVE is a stored, sourced link. Data as of 2026-11-14.