Cybersecurity researchers have uncovered new components in the Cavern (aka Cav3rn) command-and-control (C2) framework, used by Iranian nation-state hackers in attacks targeting…
Group-IB has discovered a new espionage implant named HollowGraph that hijacks Microsoft 365 calendars for command-and-control (C2) and data exfiltration. The malware,…
Iranian state-sponsored hackers affiliated with the Ministry of Intelligence and Security (MOIS) have been using a previously undocumented modular command-and-control (C2) framework…
Cavern (aka Cav3rn) is a modular command-and-control framework used by Iranian nation-state hackers, linked to Cavern Manticore. It supports various post-exploitation modules…
Cav3rn is an alternative name for the Cavern C2 framework used by Iranian hackers.
SysAid's software update feature was abused by Cavern Manticore to initiate a DLL side-loading attack leading to Cavern Agent execution.