Product
OnKeySrv
- First Reported
- Sep 16, 2026
- Latest Reported
- Sep 16, 2026
Reported Context (1)
- Subsequent versions of the malware sideload a rogue version of a DLL (“OnKeyToken_KEB.dll”) used by the Tendyron OnKeySrv program to enumerate the host and enter into a command loop that uses MQTT for C2. BambooToken Malware Uses MQTT C2 to Target Windows and Linux Systems
Malware (6)
People (1)
Threat Actors (2)
MITRE ATT&CK (6)
Vendors (2)
Products (5)
Tools (3)
Industries (8)
Countries (10)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.