Security News Cavern C2 Uses DNS and Google Apps Script to Blend Into Legitimate Traffic TheHackerNews Daniel Bender 17 Aug 2026 Share Cavern uses DNS A records to switch between direct HTTPS and Google Apps Script for C2, expanding an Iranian-linked toolkit targeting Israel.