Skip to content
Threat Feed
Subscribe

Tag

Wailing-Crab

1 brief RSS
medium advisory

Detection of Unauthorized External MQTT Broker Connections

This brief describes the detection of anomalous MQTT traffic to external brokers, a communication channel leveraged by malware like BambooToken and WailingCrab for command and control.

network-security command-and-control mqtt bamboo-token wailing-crab
1r 1t