ClingSTUN Backdoor Turns IoT Devices into Proxy Nodes via STUN

A new Linux backdoor named ClingSTUN exploits 24 known vulnerabilities to compromise IoT devices, converting them into proxy nodes. It leverages legitimate public STUN servers to hide command-and-control traffic, evading detection. The campaign signals an evolution in IoT botnet tactics, using standard protocols for stealth.