Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli Organizations
Cavern agents were observed in the wild using DLL sideloading, NativeAOT modules, AppDomain unloading, and low VirusTotal detection rates.
More info