BambooToken: A Nameless Malware Framework Taking Orders Over MQTT, The Protocol Your IoT Team Already Whitelisted
A malware framework nobody had named until this week has been running inside enterprise servers since 2023, and its command channel rides a protocol your IoT team already whitelisted. Black Lotus Labs, the research arm of Lumen, published a report this week on BambooToken, a previously undocumented malware framework that controls infected Windows and Linux…