Project Cav3rn

Kaspersky researchers identified new capabilities in a campaign targeting organizations in Israel: attackers are using Google Apps Script to disguise malicious communication and are operating a recovery mechanism designed to maintain access to computers even after the communication channel is blocked.