Security-X

Forum Security-X => News => Discussion démarrée par: igor51 le juillet 21, 2026, 12:00:16

Titre: [SecList]New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery
Posté par: igor51 le juillet 21, 2026, 12:00:16
New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

Kaspersky GReAT experts describe a new Project CAV3RN C2 module. It uses Outlook calendar for communication via Microsoft Graph and has a backup connection via DNS AAAA responses.
Source: New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery (https://securelist.com/project-cav3rn-cyberespionage-framework-using-outlook-and-dns/120757/)