World
Bambootoken Malware Framework Uses MQTT Protocol for Covert Operations Since 2023
A previously unknown malware framework called BambooToken, active since at least 2023, is using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with its command-and-control servers.
The framework leverages MQTT, a lightweight messaging protocol commonly used in Internet of Things (IoT) devices, to blend in with legitimate network traffic and evade detection. Security researchers have observed BambooToken in targeted attacks, where it establishes persistent access to compromised systems and exfiltrates sensitive data.
Continue reading from the source...
Source: BleepingComputer
- BambooToken
- MQTT
- Malware Framework
- Framework Uses
Most read in this category
Loading article…