CERT24Realtek Jungle SDK exploitation attempts deliver Cling botnet with STUN-based C2Loading data…
CERT24Threat Observatory
Period

Realtek Jungle SDK exploitation attempts deliver Cling botnet with STUN-based C2

Threat actors have attempted to exploit a patched critical remote-code-execution flaw in the Realtek Jungle SDK to deploy the Cling botnet. The malware uses STUN traffic to register infected devices, receive operator commands, and support propagation, proxying, tunneling, and denial-of-service attacks.

← Back to intelligence

Realtek Jungle SDK exploitation attempts deliver Cling botnet with STUN-based C2

Threat actors have attempted to exploit a patched critical remote-code-execution flaw in the Realtek Jungle SDK to deploy the Cling botnet. The malware uses STUN traffic to register infected devices, receive operator commands, and support propagation, proxying, tunneling, and denial-of-service attacks.