The Cavern Manticore APT, linked to Iran’s MOIS and possibly the OilRig subgroup Lyceum, employs a sophisticated modular C&C framework built in .NET with multiple compilation formats to hinder analysis. The malware uses a multi-stage infection chain starting with the abuse of SysAid’s software update mechanism to sideload a malicious WinDirStat DLL, which executes the Cavern agent. This agent fetches additional modules to perform file operations, database and network reconnaissance, LDAP and SMB brute-force attacks, and proxy tunneling. Modules are isolated in dedicated AppDomains and unloaded to remove artifacts from memory. The actor uses remote monitoring and management solutions and browser-based remote desktop tools for lateral movement and data exfiltration, exploiting complex IT supplier chains in Israel to reach intended targets. The framework’s development shows signs of AI-assisted coding combined with human involvement. There is no public indication of a patch or fix for this threat, as it involves targeted malware campaigns rather than a software vulnerability.

The threat actor can gain persistent access to targeted organizations by compromising IT service providers and leveraging a modular malware framework to conduct reconnaissance, brute-force attacks, lateral movement, and data exfiltration. This enables espionage and potential disruption of high-value government and IT infrastructure in Israel. The use of sophisticated anti-analysis techniques and supply chain compromise increases the difficulty of detection and mitigation.

No official patch or remediation is indicated for this malware campaign. Organizations should monitor for indicators of compromise related to the Cavern Manticore framework and the abuse of SysAid’s software update feature. Given the targeted nature of the attacks and the use of IT supply chain compromise, organizations should review and strengthen security controls around third-party IT providers and remote management tools. Vendor advisories or updates should be monitored for any emerging mitigation guidance. Patch status is not yet confirmed — check vendor advisories and threat intelligence sources for current remediation guidance.