Tag: cav3rn
2 articles
Iranian Hackers Evolve Cavern C2 with Google Apps Script Evasion
Meet the sneaky new tactic Iranian hackers are using to evade detection: blending malicious traffic with everyday services like Google Apps Script. By leveraging DNS A-record responses, they're able to switch between direct HTTPS channels and Google Apps Script relays, making it harder to track their moves.
Project CAV3RN Exploits Outlook Calendar for Covert C2 Communications
Meet the sneaky CAV3RN communication module that's hiding in plain sight, using Outlook calendar events and DNS AAAA records to secretly communicate with its command-and-control center. Its clever disguise is courtesy of AzureCommunication.dll, a .NET Native AOT module that's got experts curious.