Cavern Manticore: Exposing Iran-Linked Modular C2 Framework

Reported 06 Jul 2026 by otx · Severity: medium

Check Point Research tracks Cavern Manticore, an Iran-nexus threat actor targeting Israeli government and IT sectors. The actor deploys a modular C2 framework built on .NET but compiled into different formats including Mixed-Mode C++/CLI and Native AOT, creating significant anti-