A recently discovered malware framework named BambooToken has been utilizing the MQTT protocol since at least 2023 for command-and-control communications across Windows and Linux environments. This technique highlights the increasing use of standard telemetry and IoT protocols by threat actors to blend in with normal network traffic and evade detection by standard security controls.
READ THE ORIGINAL ARTICLE AT BLEEPINGCOMPUTER.COM →