<![CDATA[BambooToken Malware Uses MQTT to Control Windows and Linux Systems]]>

<![CDATA[BambooToken Malware Uses MQTT to Control Windows and Linux Systems]]>Cybersecurity researchers have disclosed details of a multi-platform campaign that abuses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control both Windows and Linux systems.

The malware family, tracked as BambooToken, is assessed to have been active since at least February 2023. It has been observed in attacks targeting organizations across Asia and South America.

Key points:

BambooToken is a multi-platform malware family affecting Windows and Linux.
It uses MQTT as its command-and-control communication channel.
Activity has been assessed since at least February 2023.
Targeted regions include Asia and South America.

Source: The Hacker News

Has your organization seen any unusual MQTT traffic that could indicate this type of abuse?

]]>https://xploitlk.com/topic/346/bambootoken-malware-uses-mqtt-to-control-windows-and-linux-systemsRSS for NodeTue, 27 Oct 2026 08:51:27 GMTTue, 15 Sep 2026 16:30:21 GMT60