Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations

An Iranian hacking group linked to Iran's Ministry of Intelligence and Security has been using a new command-and-control framework called Cavern to target organizations in Israel. The framework has been used to primarily target IT providers and government sectors. This activity has been attributed to a specific threat cluster by Check Point Research. The hacking group's use of Cavern indicates a new development in their tactics. The targets of the hacking group have been mainly in Israel. The Cavern framework is modular, allowing for flexibility in the group's operations.