kyber.today

daily cyber × ai intelligence

← threat actors

threat actor · IR

Cavern Manticore

also tracked as cavern 1

1 story · 1 in the wild · July 7, 2026 – July 7, 2026

evidence: 1 observed

sectors

  • government 1 · Jul 7
  • technology 1 · Jul 7

geography

  • iran 1 · Jul 7
  • israel 1 · Jul 7

malware and tools

  • cavern c2 1 · Jul 7

attack phases seen

  • Command and control 1 · Jul 7

what we reported, newest first, grouped by story

July 7, 2026

  • Cavern (aka Cav3rn / Cavern Manticore), a previously undocumented modular C2 framework tied to Iran's MOIS, is being used against Israeli IT providers and government entities. Check Point documents custom C2 protocols, anti-analysis features, and low detection rates (The Hacker News, Check Point). · Jul 7 · observed · as cavern · Threat Activity