BambooToken

BambooToken Malware Exploits MQTT Protocol for Multi-Platform Control

Cybersecurity researchers have detailed a malware campaign tracked as BambooToken, which uses the Message Queueing Telemetry Transport (MQTT) protocol as a command-and-control channel. The operation, active since at least February 2023, targets organizations in Asia and South America, leveraging MQTT's lightweight nature to maintain covert remote access on both Windows and Linux systems.