securelist.com· Jul 21, 2026· by GReAT

New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

Kaspersky GReAT experts describe a new Project CAV3RN C2 module. It uses Outlook calendar for communication via Microsoft Graph and has a backup connection via DNS AAAA responses.

🎯 Vulnerability: Web Security Vulnerability

💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.

#GReAT research#Malware descriptions#Malware Technologies#Microsoft#Microsoft Windows#DNS#Malware Descriptions#Malware

New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

More Writeups Like This

Angry Birds: Toy Ghouls’ new toys

Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection

Toy Ghouls’ new toy: the GenieLocker ransomware

GoSerpent: a persistent threat evolves with sophisticated data collection and exfiltration