DevThe Hacker Newsabout 3 hours ago
Cavern C2 Blends DNS and Google Apps Script
1 min read
Cavern C2 now uses DNS A-record responses to choose between direct HTTPS and a Google Apps Script relay per transaction, rotating the Google channel via DNS. Kaspersky also found HOLLOWGRAPH, which abuses Microsoft 365 calendars as covert C2 channels, with events dated 13 May 2050.
Level
Hype check
Tap to vote and see what everyone thinks.
In this storyGoogle
Summary by ByteBrief
