{"id":529123,"date":"2026-07-07T06:52:09","date_gmt":"2026-07-07T06:52:09","guid":{"rendered":"https:\/\/www.newsbeep.com\/il\/529123\/"},"modified":"2026-07-07T06:52:09","modified_gmt":"2026-07-07T06:52:09","slug":"iran-linked-hacker-group-cavern-manticore-targets-israeli-it-government-sectors","status":"publish","type":"post","link":"https:\/\/www.newsbeep.com\/il\/529123\/","title":{"rendered":"Iran-linked hacker group Cavern Manticore targets Israeli IT, government sectors"},"content":{"rendered":"<p>An Iran-linked <a href=\"https:\/\/www.jpost.com\/tags\/hack\" rel=\"nofollow noopener\" target=\"_blank\">hacking<\/a> group has created a new framework to attack <a href=\"https:\/\/www.jpost.com\/israel-news\/defense-news\/article-887153\" rel=\"nofollow noopener\" target=\"_blank\">Israeli organizations<\/a> in the government and IT sectors while evading traditional detection and analysis systems, Israeli cybersecurity company Check Point disclosed in a report released on Monday.<\/p>\n<p class=\"article-paragraph-section article-body-paragraph\">This new framework allows hackers to tailor attacks to new environments, limit what defenders and analysts can recover from any single victim, and extend access after the initial attack through specialized modules for expansion and data access, CPR explained.<\/p>\n<p class=\"article-paragraph-section article-body-paragraph\">According to the report, the group first attacked and used trusted IT providers to spread their new tool, which then gained access to files on the infected computers, downloaded additional programs, searched files and internal networks, tested passwords, and moved deeper into the targeted organizations.<\/p>\n<p class=\"article-paragraph-section article-body-paragraph\">Once installed, the tool can infiltrate programs used to access other computers. Malware disguised as legitimate updates from the IT provider can be delivered to the customer.<\/p>\n<p class=\"article-paragraph-section article-body-paragraph\">The tool appeared to be specifically designed to exploit Remote Monitoring and Management (RMM) solutions, in which control of a device can be transferred to another party.<\/p>\n<p class=\"article-paragraph-section article-body-paragraph\">CPR found multiple instances of an initially compromised provider leading to another before the tool reached its intended target, leading to the belief that Cavern Manticore has a detailed understanding of the IT supplier chains within Israel.<\/p>\n<p class=\"article-paragraph-section article-body-paragraph\">CPR warned that Cavern Manticore illustrated the strength and danger of Iranian cyber capabilities with a system that can rapidly adapt to new campaigns, targets, and operational requirements.<\/p>\n","protected":false},"excerpt":{"rendered":"An Iran-linked hacking group has created a new framework to attack Israeli organizations in the government and IT&hellip;\n","protected":false},"author":2,"featured_media":529124,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[120893,4287,126841,93774,120891,42,126842,223061,43,40,38,41,39],"class_list":["post-529123","post","type-post","status-publish","format-standard","has-post-thumbnail","category-headlines","tag-computer-hacker","tag-cybersecurity","tag-cybersecurity-israel","tag-hacker","tag-hacker-muslim","tag-headlines","tag-israeli-cybersecurity","tag-muslim-hackers","tag-news","tag-top-news","tag-top-stories","tag-topnews","tag-topstories"],"_links":{"self":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/529123","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/comments?post=529123"}],"version-history":[{"count":0,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/posts\/529123\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media\/529124"}],"wp:attachment":[{"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/media?parent=529123"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/categories?post=529123"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.newsbeep.com\/il\/wp-json\/wp\/v2\/tags?post=529123"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}