OTX Threat: ClingSTUN Linux Backdoor Abuses Public STUN Infrastructure

A Linux malware strain named ClingSTUN exploits unpatched vulnerabilities in Internet-facing devices to establish persistent footholds and functions as a back-connect proxy backdoor. The campaign targets IoT devices through multiple CVEs including command injection and code execution flaws in various vendors' products. ClingSTUN abuses legitimate public STUN infrastructure to discover externally m CVEs: CVE-2014-8361, CVE-2019-7256, CVE-2019-17621, CVE-2021-35394, CVE-2016-20016