Cavern Manticore

Cavern Manticore is an Iran-nexus APT primarily targeting Israeli organizations in the government and IT sectors, linked to the MOIS. The group employs a modular command-and-control framework built on a shared .NET foundation, utilizing multiple compilation formats to create an anti-analysis layer. Their operations demonstrate a high operational tempo and a disciplined approach to target selection, particularly during campaigns like "Operation Epic Fury." By decoupling core infrastructure from mission-specific modules, Cavern Manticore enhances operational agility while complicating detection efforts for defenders.

Qrupun mənşəyi İran kimi bildirilir.

Bu aktor haqqında dərc edilmiş hesabatlar:

• https://research.checkpoint.com/2026/cavern-manticore-exposing-iran-linked-modular-c2-framework/

Mənbə: MISP Galaxy, Malpedia.