Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

Iranian hackers, linked to Iran's Ministry of Intelligence and Security (MOIS) and operating under the moniker Cavern Manticore, are utilizing a new, modular command-and-control (C2) framework called ‘Cavern’ to target Israeli organizations. The framework leverages a sophisticated .NET-based architecture with multiple compilation formats to evade detection and facilitate lateral movement within compromised networks. The attacks involve exploiting trusted service providers and utilizing RMM solutions to reach intended targets, highlighting a significant threat to the software supply chain.