Israeli cybersecurity firm Check Point has disclosed that a newly active hacker group called "Cavern Manticore" has been conducting cyberattacks against Israeli government agencies and IT companies since early 2026.
According to the company's findings, the group leverages a complex modular infrastructure that enables covert network access by exploiting legitimate tools designed for remote management and software updates.
Check Point assesses that the methods employed by "Cavern Manticore" are similar to those previously identified in the operations of "Muddywater" and "Lyceum," hacker groups linked to Iran's Ministry of Intelligence.