PROJECT CAV3RN is a malware family identified by Kaspersky Labs, associated with an untraceable cyber espionage group targeting organizations in Israel. Key features include DNS-based command selection and Google Apps Script relays. The framework uses local DLL modules and establishes control through an internal broker that masquerades as a legitimate library.
Communication is managed through a complex command-and-control mechanism utilizing DNS for routing and, if necessary, communicates directly bypassing Google services. Security measures involve monitoring DNS queries for suspicious behavior and unauthorized script execution.