Iranian Spy Campaign Against Israel Adapts Using Google Cloud Services

How 2 Israeli newsrooms covered this story — translated into English and compared side by side.

50% center

Center 1Right 1

By קובי ברקת

What happened

Kaspersky researchers report that the Iranian Project CAV3RN espionage campaign targeting Israeli organizations now uses Google Apps Script to hide malicious communications, complicating detection and showing advanced attacker adaptability.

01Iranian espionage campaign Project CAV3RN targets Israeli organizations using Google Cloud services.
02Attackers use Google Apps Script to disguise malicious communications as legitimate traffic.
03Malware includes recovery mechanisms to switch communication channels if blocked.
04Trend shows shift to modular attack platforms for prolonged victim access.
05Similar tactics were previously seen using Microsoft Outlook and Graph services.
06Use of Google Apps Script highlights growing detection challenges for Israeli organizations.

Summary translated & synthesized from the sources below by baba. Read each original for the full report.