Briefing critical-infrastructurecommunications
Cavern C2 Evolves: Iranian MOIS Group Adds Google Apps Script and M365 Calendar Channels
Kaspersky and Group-IB analysis reveals Iranian MOIS-linked Cavern Manticore has extended its C2 framework with DNS-directed Google Apps Script relays and a new HOLLOWGRAPH module abusing Microsoft 365 calendar events — while APT42 separately targets the nuclear energy sector with AI-accelerated TAMECAT implants.