OTX Threat: A STUNning Disguise: Cling Malware Masquerades as Google
A sophisticated IoT botnet dubbed Cling has been discovered exploiting vulnerable internet-exposed devices through CVE-2021-35394 and other command-injection flaws. The malware distinguishes itself by abusing STUN protocol traffic and public STUN infrastructure for command-and-control communications, making malicious activity appear as legitimate NAT-traversal behavior. Cling propagates through mu CVEs: CVE-2014-8361, CVE-2016-10372, CVE-2021-35394, CVE-2016-20016, CVE-2023-26801 Sectors: Educat