Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
17 IOCs
Project CAV3RN continues: Google Apps Script as C2 relay and DNS-based C2 channel selection
Excerpt
Project CAV3RN is a modular espionage framework used against targets in Israel. This report expands on two earlier publications: the first was published in June 2026 as part of our Kaspersky Threat Intelligence Reporting service , and the second was published on Securelist the following month, further documenting the framework’s evolving architecture and C2 capabilities. Continued tracking of this cluster in early August 2026 uncovered several previously undocumented…
Read the original report →Diamond Model
Adversary
Infrastructure(6)
Capability
Victim
Indicators of Compromise
Open the mindmap →17 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| MD5 | f9156d42410c8a5429dec43329bd72e0 | Medium | Score 53/100 | First seen |
| Domain | ns1.studiotikva.com | High | Score 69/100 | First seen |
| URL | https://api.studiotikva.com/api/v1/update/check | High | Score 58/100 | First seen |
| Domain | ycz2.41414141303030.m.studiotikva.com | High | Score 58/100 | First seen |
| Domain | studiotikva.com | High | Score 69/100 | First seen |
| IP | 144.172.115.17 | High | Score 58/100 | First seen |
| IP | 12.19.29.30 | High | Score 58/100 | First seen |
| MD5 | 34d50eec364d920b8b5d885c9bc98607 | Medium | Score 53/100 | First seen |
| IP | 144.172.104.82 | High | Score 58/100 | First seen |
| Domain | p.studiotikva.com | High | Score 58/100 | First seen |
| URL | https://api.studiotikva.com/ac | High | Score 58/100 | First seen |
| MD5 | 904784c9943d019da332bea2cd03996f | Medium | Score 53/100 | First seen |
| MD5 | 2dcd4a8ac166404977cd3c48418a8cd9 | Medium | Score 53/100 | First seen |
| Domain | q.studiotikva.com | High | Score 58/100 | First seen |
| IP | 12.121.234.120 | High | Score 58/100 | First seen |
| MD5 | 981c7404d31b8ce35ec88a6b290f354d | Medium | Score 53/100 | First seen |
| Domain | ns2.studiotikva.com | High | Score 69/100 | First seen |
IOC Relationship Graph
Building graph…