Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Project CAV3RN is a modular espionage framework targeting entities in Israel, continuing to evolve with sophisticated command-and-control (C2) capabilities. The framework uses a multi-transport C2 module that leverages DNS A-record responses to dynamically select between direct HTTPS connections and Google Apps Script relays for C2 communications. It employs DNS-based channel selection and can rotate Google Apps Script deployment IDs via DNS queries, enhancing resilience and evasion. The infrastructure includes a local DLL broker for component orchestration and runtime upgrades, indicating a high level of operational maturity.

AI-extracted · verify before operational use