Cavern (aka Cav3rn) is a modular command-and-control framework used by Iranian nation-state hackers, linked to Cavern Manticore. It supports various post-exploitation modules and has evolved to use DNS and Google Apps Script for stealthy communication.