BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files

BambooToken is a Linux backdoor that turns a lightweight messaging protocol into a remote control channel. The newly analysed sample can collect information about a host, run shell commands, and move files between a compromised machine and its operator. Its use of MQTT is notable because the protocol is common in connected-device environments and... Weiterlesen