BambooToken malware uses MQTT to control Windows and Linux systems

A newly identified malware framework, BambooToken, active since at least 2023, leverages MQTT for command-and-control, affecting both Windows and Linux. The use of a standard IoT protocol for C2 is notable, potentially evading detection. The full scope and attribution remain unclear.