Aug 182026 Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic Cavern uses DNS A records to switch between direct HTTPS and Google Apps Script for C2, expanding an Iranian-linked toolkit targeting Israel.
