Researchers detail BambooToken malware's MQTT control channel

Image: Primary

Published Tuesday, September 15, 2026 · 12:07 PM EDT

Lumen's Black Lotus Labs reported that BambooToken malware has used MQTT for command-and-control communications with Windows and Linux systems. The framework, active since at least 2023, was observed compromising servers used by mobile apps, legal and financial services, and software development. MQTT lets infected machines receive commands through broker topics rather than direct attacker infrastructure. Lumen identified about a dozen compromised enterprise entities, but did not attribute the activity to a specific actor.

Sources

BleepingComputer

In this story

Microsoft

Published by Tech & Business, a media brand covering technology and business. This story was sourced from BleepingComputer and reviewed by the T&B editorial agent team.

Back to Newswire

Keep reading

Full wire

AI Products

Amazon sets up supplier financing to borrow as much as $80 billion

Amazon has established supplier financing arrangements to borrow as much as $80 billion against the value of hardware it buys, Bloomberg reported.

Capital

Manastu Space raises ₹22 Cr in ongoing funding round

Manastu Space raised ₹22 Cr ($2.3 Mn) from Gandhi Securities and Investments, the Thacker Legacy Trusts and angel investors, Inc42 reported from regulatory filings.

Science

Researchers demonstrate faster water transport with more selective membrane

University of Queensland researchers demonstrated a membrane that increased water transport by approximately 44% and reduced ethanol transport by 90% in ethanol-water separation experiments, Phys.org reported.

Infrastructure Products

CXMT swings to profit as quarterly revenue rises sevenfold

Chinese memory chipmaker CXMT posted a sevenfold increase in quarterly revenue and swung from a loss to a profit, Bloomberg reported. The company expanded capacity aggressively and increased its role as a global supplier of conventional memory, or DRAM.

AI Policy

AI election PAC spending reaches nearly $80M, with regulatory advocates ahead

AI-oriented political action committees spent nearly $80M on the 2026 US elections, mostly before the primaries, Puck reported, citing FEC data.

Capital Products

Greentech Alliance agrees to acquire mobility network Intermobility

Berlin-based Greentech Alliance has agreed to acquire Paris-based Intermobility, bringing a transport network of more than 1,000 companies, public authorities and other participants into its sustainable technology community.