MEDIUMMalware
Global

ClingSTUN Malware Turns Unpatched IoT Devices Into Proxy Nodes

·Source: Infosecurity Magazine

Updated:

Executive Summary

ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices

Analysis

ClingSTUN exploits known IoT flaws and abuses public STUN servers to keep proxy access to devices
Source Attribution

Originally published by Infosecurity Magazine on Oct 5, 2026.

Related Threats

MEDIUMMalware

ClickFix campaign in Ukraine compromises over 100 websites to spread Lunex malware

CERT-UA found fake Cloudflare verification pages that led visitors into a now-familiar ClickFix trap. This time the goal was to infect machines with an infostealer.

The Record
MEDIUMMalware

FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware

An alleged leader of Tren de Aragua’s ATM jackpotting activities, Canelon Aguirre was on the FBI’s top 10 most wanted list since March 2026. The post FBI Arrests ‘Most Wanted’ Developer of Ploutus ATM Malware appeared first on SecurityWeek .

SecurityWeek
LOWMalware

New Linux malware turns vulnerable IoT devices into proxy nodes

A new Linux backdoor is turning vulnerable internet-facing devices into remotely controlled proxy nodes, while using the public Session Traversal Utilities for NAT (STUN) infrastructure to blend into normal VoIP and WebRTC traffic. Fortinet’s FortiGuard Labs said it has been tracking the malware, dubbed ClingSTUN, across multiple attacks exploiting known vulnerabilities in routers, IoT devices, DV

CSO Online