CAV3RN Framework Upgrades to Outlook Calendar for C2 Communication

The CAV3RN cyberespionage framework introduced a new communication module, AzureCommunication.dll, which uses Microsoft Graph to read Outlook calendar events for stealthy C2 and leverages DNS AAAA records for configuration recovery; the framework has targeted entities in Israel since December 2025 and was notably updated in April 2026 to a controller-based, modular architecture that improves post-exploitation capabilities and detection avoidance.