Auteur Sujet: [SecList]New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery  (Lu 335 fois)

0 Membres et 1 Invité sur ce sujet

Hors ligne igor51

  • Admin
  • Mega Power Members
  • *****
  • Messages: 10419
New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

Kaspersky GReAT experts describe a new Project CAV3RN C2 module. It uses Outlook calendar for communication via Microsoft Graph and has a backup connection via DNS AAAA responses.
Source: New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

Tags: