ClingSTUN Turns Vulnerable IoT Devices Into Proxy Nodes

A Linux backdoor called ClingSTUN is exploiting vulnerabilities in IoT devices to turn them into proxy nodes. The backdoor takes advantage of 24 known flaws to compromise these devices. It also utilizes public STUN servers to hide its communication, making it harder to detect. This tactic allows the backdoor to obscure its activities. The use of legitimate servers adds a layer of complexity to identifying and tracking the malicious traffic.