Linux Backdoor 'ClingSTUN' Abuses STUN Protocol, Exploits Dozens of Flaws for Self-Propagation

A newly discovered Linux backdoor, ClingSTUN, uses the STUN protocol for covert command-and-control, establishes persistence, and includes exploits for self-propagation. The malware's novel use of STUN and its self-propagating capability suggest a sophisticated threat actor, though attribution and full scope remain unclear.