Iranian Hackers Utilize Cavern C2 Framework to Target Israeli Organizations

An Iranian hacking group affiliated with MOIS is using a modular command-and-control (C2) framework named Cavern to target Israeli IT providers and government sectors. This framework employs advanced anti-analysis techniques, including multiple .NET compilation formats, to facilitate lateral movement and data exfiltration.

An Iranian hacking group affiliated with Iran's Ministry of Intelligence and Security (MOIS) has been wielding a previously undocumented modular command-and-control (C2) framework dubbed Cavern (aka Cav3rn) targeting Israeli organizations.

The activity, which has primarily singled out IT providers and government sectors, has been attributed to a threat cluster tracked by Check Point Research

Read original article