A previously undocumented malware framework named BambooToken is using the MQTT messaging protocol to control compromised Windows and Linux systems. Researchers have identified infections across several industries, including finance, legal services, hospitality and software development. The campaign has operated since at least 2023. However, its operators began adding MQTT-based command-and-control capabilities to variants developed between…