BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files

BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files

BambooToken is a Linux backdoor that turns a lightweight messaging protocol into a remote control channel. The newly analysed sample can collect information about a host, run shell commands, and move files between a compromised machine and its operator. Its use of MQTT is notable because the protocol is common in connected-device environments and uses […]

Linux BambooToken Malware Uses MQTT C2 for Remote Shell Access and File Exfiltration

A Linux variant of the BambooToken backdoor uses MQTT as its command-and-control channel, enabling operators to profile compromised hosts, execute shell… Read more →