MEDIUMMalware
Global

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

·Source: Securelist (Kaspersky)

Updated:

Executive Summary

Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade detection.

Analysis

Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade detection.
Source Attribution

Originally published by Securelist (Kaspersky) on Aug 11, 2026.

Related Threats

MEDIUMVulnerability

Mobile wallets gain traction in the UK

Cards continue to dominate UK payments but mobile wallets are increasingly popular, with nearly two thirds of the population registered with at least one provider, according to the latest industry data.

Finextra
MEDIUMVulnerability

Citi introduces Custody+

As institutional investors navigate compressed settlement cycles, continuous markets and AI-driven decision making, Citi Investor Services has launched Custody+, a comprehensive suite of near- and real-time solutions to meet always-on industry demand.

Finextra
MEDIUMMalware

Silent 'TwinLoot' Cyber Threat Operates Entirely From Microsoft's Cloud

The Python-based malware framework takes living-off-the-land tactics to a new heights of stealth, with a modular implant that steals credentials and achieves persistence.

Dark Reading