Briefing governmentcritical-infrastructure
Cavern C2 Framework Gains a Google Apps Script Relay as Group-IB Details Its HOLLOWGRAPH Component
Kaspersky documents a DNS-directed Google Apps Script relay in the Cavern espionage framework, while Group-IB details HOLLOWGRAPH, a component that uses Microsoft 365 calendar events as a dead drop. Group-IB says the actor behind it remains unknown.