Executive Summary

Cybersecurity researchers uncovered BambooToken, a multi‑platform malware that leverages the MQTT protocol to remotely control Windows and Linux machines. First seen in February 2023, the campaign has targeted organizations in Asia and South America, using MQTT as a covert command‑and‑control channel.

---

Intelligence Metadata - Source Publisher: The Hacker News - Published Date: 2026-09-15T15:23:19+00:00 - Category: threat-intel

Original Description: Cybersecurity researchers have disclosed details of a multi-platform campaign that uses the Message Queueing Telemetry Transport (MQTT) protocol as a communication channel to control Windows and Linux systems. The emerging malware family, codenamed BambooToken, is assessed to be active since at least February 2023 and put to use in attacks targeting organizations across Asia and South America.

"Intuition will tell the thinking mind where to look next."

— Jonas Salk