BambooToken Malware Uses MQTT to Control Windows and Linux Systems

Researchers have revealed a multi-platform campaign using the MQTT protocol to control compromised systems. The malware, known as BambooToken, is believed to have been active since at least February 2023. BambooToken targets both Windows and Linux systems, and has been used in attacks on organizations in Asia and South America. The use of MQTT as a communication channel is a notable aspect of this campaign. The malware's activity has been assessed by cybersecurity researchers, who have disclosed details of the emerging threat. BambooToken's reach spans multiple continents, with reported attacks in two major regions.