Linux Backdoor Abuses STUN Protocol, Exploits Dozens of Flaws

A Linux backdoor, referred to as ClingSTUN, functions as a back-connect proxy backdoor and establishes persistence. It also contains exploits that allow it to self-propagate. The backdoor abuses the STUN protocol and takes advantage of numerous vulnerabilities. ClingSTUN's capabilities enable it to maintain access and spread to other systems. The backdoor's exploitation of dozens of flaws contributes to its ability to propagate. Its abuse of the STUN protocol is a key aspect of its operation.