Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors are attempting to exploit a critical security flaw in the Realtek Jungle software development kit to deploy the Cling botnet malware. The vulnerability in question has now been patched. The Cling malware is notable for using ordinary STUN behavior as a command-and-control channel. This approach allows the malware to repurpose existing behavior for malicious purposes. The Cling botnet is being used by threat actors to establish a foothold in compromised systems.