BambooToken Malware Uses MQTT to Control Windows and Linux Systems
-
Cybersecurity researchers have disclosed details of a multi-platform campaign that abuses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control both Windows and Linux systems.
The malware family, tracked as BambooToken, is assessed to have been active since at least February 2023. It has been observed in attacks targeting organizations across Asia and South America.
Key points:
- BambooToken is a multi-platform malware family affecting Windows and Linux.
- It uses MQTT as its command-and-control communication channel.
- Activity has been assessed since at least February 2023.
- Targeted regions include Asia and South America.
Source: The Hacker News
Has your organization seen any unusual MQTT traffic that could indicate this type of abuse?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login