APT / state · Tue 11 Aug 2026 · 10:00 UTC
Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection
Filed UTCSource SLI ↗
Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade detection.
Get the next one first.
Every dispatch goes to Telegram and RSS the moment it is published, and the whole wire is a keyless JSON API.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.