# Researchers detail BambooToken malware's MQTT control channel

_Published Tuesday, September 15, 2026 at 12:07 PM EDT · Security · Latest · Tier 2 — Notable_

![Researchers detail BambooToken malware's MQTT control channel — Primary](https://www.bleepstatic.com/content/hl-images/2024/03/05/hand.jpg)

Lumen's Black Lotus Labs reported that BambooToken malware has used MQTT for command-and-control communications with Windows and Linux systems. The framework, active since at least 2023, was observed compromising servers used by mobile apps, legal and financial services, and software development. MQTT lets infected machines receive commands through broker topics rather than direct attacker infrastructure. Lumen identified about a dozen compromised enterprise entities, but did not attribute the activity to a specific actor.

## Sources

- [BleepingComputer](https://www.bleepingcomputer.com/news/security/bambootoken-malware-controls-windows-and-linux-systems-via-mqtt/)

---
Canonical: https://techandbusiness.org/newswire/wk-JTzXliqp6uW_8aRMIF2
Published: 2026-09-15T16:07:22.671Z
Story chronology: 2026-09-15T15:00:00.000Z
Retrieved: 2026-10-30T21:11:42.139Z
Publisher: Tech & Business (techandbusiness.org)