Skip to content
archiveAPT / state · 11 Aug 2026 · 10:00 UTC

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

last 60 dispatches · spectrum

Project CAV3RN targets Israel with Google Apps Script C2 relays and DNS-based routing. Modular .NET NativeAOT framework blends C2 traffic with legitimate Google services to evade detection.

grounded ✓primary source ↗
Early access

Get the next one first.

Early access opens the actor API and MCP server first, plus alerts when an adversary you follow lands on the wire. One email when it's ready. Nothing else, ever.

bot-protected