Group-IB has discovered a new espionage implant named HollowGraph that hijacks Microsoft 365 calendars for command-and-control (C2) and data exfiltration. The malware,…
Iranian state-sponsored hackers affiliated with the Ministry of Intelligence and Security (MOIS) have been using a previously undocumented modular command-and-control (C2) framework…
Cavern is a modular backdoor framework documented by Check Point, attributed to an Iranian Ministry of Intelligence and Security-linked actor called Cavern…
Cav3rn is an alternative name for the Cavern C2 framework used by Iranian hackers.
SysAid's software update feature was abused by Cavern Manticore to initiate a DLL side-loading attack leading to Cavern Agent execution.
Check Point Research is the threat intelligence arm of Check Point Software Technologies. It identified and analyzed the Cavern C2 framework and…