New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

Kaspersky Securelist·6h·Reputable

Kaspersky GReAT experts describe a new Project CAV3RN C2 module. It uses Outlook calendar for communication via Microsoft Graph and has a backup connection via DNS AAAA responses.

Categories cybersecurity · government-security · unknown-it-category-15

Original source / advisory ↗

Published

7/21/2026, 8:40:47 AM

Fetched

7/21/2026, 12:19:31 PM

Trust

reputable · 80/100

Language