Iranian Spy Campaign Against Israel Adapts Using Google Cloud Services

What happened

1. 01Iranian espionage campaign Project CAV3RN targets Israeli organizations using Google Cloud services.
2. 02Attackers use Google Apps Script to disguise malicious communications as legitimate traffic.
3. 03Malware includes recovery mechanisms to switch communication channels if blocked.
4. 04Trend shows shift to modular attack platforms for prolonged victim access.
5. 05Similar tactics were previously seen using Microsoft Outlook and Graph services.
6. 06Use of Google Apps Script highlights growing detection challenges for Israeli organizations.

Translated and summarized by baba from Behadrei Haredim, the latest report. Read Behadrei Haredim’s original