IOC Radar
TLP:WHITE13 IOCs

New Project CAV3RN module abuses Outlook calendar events for C2 and DNS AAAA records for configuration recovery

SE
Securelist
Published July 21, 2026Original Report

Threat Actors

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYAPT34INFRASTRUCTUREns1.cloudlanecdn.comns3.cloudlanecdn.comns2.cloudlanecdn.comCAPABILITYunknownVICTIMunknown
Adversary(1)
Infrastructure(6)
Capability
Victim

5W+H Threat Analysis

Analysis unavailable

Indicators of Compromise

Indicators of Compromise13

TypeIndicatorConfidenceScoreFirst Seen
Domainns1.cloudlanecdn.com
indicatorintel-blognetwork
High
58
Jul 22, 26
MD5caf021dda726b8ba049c2aa395e505a1
exploitfile-hashintel-blog
Medium
53
Jul 22, 26
Domainns3.cloudlanecdn.com
indicatorintel-blognetwork
High
58
Jul 22, 26
Domainns2.cloudlanecdn.com
indicatorintel-blognetwork
High
58
Jul 22, 26
IP144.172.108.205
indicatorintel-blognetwork
High
58
Jul 22, 26
Domainclipeditskill.com
exploitintel-blognetwork
High
58
Jul 22, 26
Domainns4.cloudlanecdn.com
indicatorintel-blogmalware
Medium
47
Jul 21, 26
MD5c092b02fbc0fdf7ee9608dd016673806
exploitfile-hashintel-blog
Medium
53
Jul 22, 26
IP216.126.237.197
indicatorintel-blognetwork
High
58
Jul 22, 26
Domaind.53466d4c67515a.0.p.cloudlanecdn.com
indicatorintel-blognetwork
High
58
Jul 22, 26
Domaincloudlanecdn.com
indicatorintel-blogmalware
High
72
Jul 13, 26
MD529b2b8c5d99f05bfcdd0d8d976eb5678
exploitfile-hashintel-blog
Medium
53
Jul 22, 26
Domainaccesslinkssl.com
exploitintel-blognetwork
High
58
Jul 22, 26

IOC Relationship Graph

IOC Relationship Graph13 total IOCs
DomainMD5IP
Domain8MD53IP2Actors1REPORTNew Project CAV3RN module APT34
scroll to zoom · drag to pan · click IOC to open