highCyber Attacks
Kaspersky Details Cavern C2 Framework Evolution Blending DNS and Google Apps Script
Kaspersky researchers have identified new components in the Cavern (Cav3rn) command-and-control framework used by Iranian nation-state hackers. The framework has evolved to leverage DNS tunneling and Google Apps Script to blend into legitimate traffic, targeting entities in Israel. The ongoing monitoring since December 2025 has revealed previously unreported capabilities that expand the threat actor's operational reach.
The Hacker News1 min read