Mmastodon TechnologyCybersecurity first seen 2 d ago, last 2 d ago, peak #1

ClingSTUN backdoor targets Linux IoT devices via STUN servers

Original: (blog.polyswarm.io) ClingSTUN: Linux Backdoor Abusing Public STUN Infrastructure for Persistent IoT and Embedded Device

Security researchers at PolySwarm have detailed ClingSTUN, a Linux backdoor that compromises IoT and embedded devices by exploiting known vulnerabilities. The malware abuses public STUN infrastructure to maintain persistent back-connect proxy access, letting attackers relay traffic and stay hidden. Cybersecurity observers are sharing the analysis as a warning that widely deployed embedded Linux devices remain vulnerable to such campaigns.

Why now: A newly published malware analysis revealing a novel abuse of public STUN servers for persistent IoT compromise is drawing attention from the security community.

PolySwarmClingSTUNSTUNIoT devicesLinux

Open on mastodon →

Evidence

• (blog.polyswarm.io) ClingSTUN: Linux Backdoor Abusing Public STUN Infrastructure for Persistent IoT and Embedded Device Compromise In brief - This article describes ClingSTUN, a Linux-based back-connect proxy backdoor that targets IoT and embedded devices by exploiting known… · orlysec@swecyb.com · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/2140595