Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files

Cybersecurity NewsSeptember 22, 20264 min read

BambooToken is a Linux backdoor that turns a lightweight messaging protocol into a remote control channel. The newly analysed sample can collect information about a host, run shell commands, and move files between a compromised machine and its operator. Its use of MQTT is notable because the protocol is common in connected-device environments and uses […] The post BambooToken Linux Backdoor Uses MQTT C2 to Execute Shell Commands and Exfiltrate Files appeared first on Cyber Security News.

BambooToken is a Linux backdoor that turns a lightweight messaging protocol into a remote control channel. The newly analysed sample can collect information about a host, run shell commands, and move files between a compromised machine and its operator. Its use of MQTT is notable because the protocol is common in connected-device environments and uses a broker to relay messages. Reverser analysts identified the implant after decoding a small embedded configuration block and tracing…

Excerpt shown under the publisher's RSS terms · 74 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article