Malware
Project CAV3RN
- First Reported
- Jul 21, 2026
- Latest Reported
- Aug 12, 2026
Reported Context (2)
- Project CAV3RN is a modular espionage framework targeting Israel that uses a DNS-based control plane to switch between direct HTTPS and a Google Apps Script relay. Project CAV3RN Uses DNS to Switch Between HTTPS and Google Apps Script C2
- Kaspersky detailed Project CAV3RN, a modular cyberespionage framework targeting Israel that now uses AzureCommunication.dll and Microsoft Graph Outlook calendar events for C2. CAV3RN Module Uses Outlook Calendar Events for C2 and DNS AAAA Records for Configuration Recovery
Threat Actors (2)
MITRE ATT&CK (10)
Vendors (1)
Products (4)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.