ClingSTUN

ClingSTUN Linux Backdoor Exploits 24 IoT Vulnerabilities to Create Proxy Nodes

A newly identified Linux backdoor named ClingSTUN has been observed exploiting 24 known vulnerabilities in IoT devices. Once compromised, the devices are repurposed as proxy nodes that route malicious traffic through legitimate public STUN servers to hide command-and-control communications. The report, initially published by Dark Reading, notes that specific vulnerability details, CVE assignments, and victim counts have not been independently verified.