CYBERSECURITYTRACKER
TRACKING
Permanent story citation

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 9360

As cited

Copy frozen at (site build).

threat intel

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors are exploiting a patched critical flaw in the Realtek Jungle software development kit (SDK) to deploy Cling botnet malware. Cling uses Simple Traversal of User Datagram Protocol (STUN) protocol behavior as a command-and-control channel rather than adopting novel propagation methods.

Why it matters: Organizations using Realtek Jungle SDK products need to apply available patches immediately; defenders should monitor for Cling botnet indicators and STUN-based command traffic, as exploitation attempts are active.

Source published
First seen by Cybersecurity Tracker

Source attribution

Correction

Correction recorded as of .

threat intel

Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Threat actors are exploiting a patched critical flaw in the Realtek Jungle software development kit (SDK) to deploy Cling botnet malware. Cling uses Simple Traversal of User Datagram Protocol (STUN) protocol behavior as a command-and-control channel rather than adopting novel propagation methods.

Why it matters: Organizations using Realtek Jungle SDK products need to apply available patches immediately; defenders should monitor for Cling botnet indicators and STUN-based command traffic, as exploitation attempts are active.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary