October 4, 2026
- A new IoT botnet, CLING, hides its C2 inside STUN traffic. Nozomi Networks Labs says the malware infects internet-facing routers, cameras and DVRs, then repeatedly contacts public STUN servers — the same NAT-traversal protocol browsers and voice/video apps use — to register infected devices and receive commands, giving it C2 that blends into ordinary real-time-communications noise (Nozomi Networks Labs). · Threat Activity