BambooToken malware controls Windows and Linux systems via MQTT

What happened

A previously unknown malware framework called BambooToken, active since at least 2023, is now using the Message Queuing Telemetry Transport (MQTT) protocol to communicate with Windows and Linux systems. [...]

Why it matters

The development may change operating conditions or market expectations around Security. Further confirmation and measurable outcomes matter.

Affected entities

View evidence

2 reports · 1 original report · 2 independent

1. BleepingComputerPrimary source · Supports · EN · 100%
   BambooToken malware controls Windows and Linux systems via MQTT ↗Sep 15, 2026, 11:00 AM
2. The Hacker NewsIndependent · Supports · EN · 59%
   BambooToken Malware Uses MQTT to Control Windows and Linux Systems ↗Sep 15, 2026, 11:23 AM

Claims

• BambooToken malware controls Windows and Linux systems via MQTT Observed

Conflicts

No material conflict detected in the available evidence.

Timeline

1. September 15, 2026 at 11:00 AMFirst reported
2. Sep 15, 2026, 11:41 AMUnverified · 55/66%

Market move following event

Market reaction is not yet available for this asset and time window.

Score explanation