Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic
Cavern uses DNS A records to switch between direct HTTPS and Google Apps Script for C2, expanding an Iranian-linked toolkit targeting Israel.
More info