EnGenius

Reported Context (2)

This time, they didn’t focus on a single vulnerability but on two: command injection in the EnGenius IoT cloud service (CVE-2025-34035) and D-Link UPnP (CVE-2024-23625). ClingSTUN Linux Backdoor Abuses Public STUN Services to Control Compromised IoT Devices
The malware’s operators were seen indiscriminately exploiting Avtech, EnGenius, D-Link, Hytec, Ivanti, Lantronix, Linear, MeiG, Realtek, Sunhillo, Tenda, and TP-Link flaws, and appear to be expanding their portfolio ClingSTUN Linux Backdoor Uses STUN for Proxying and Exploits Dozens of Flaws

CVE (31)

Malware (4)

People (1)

MITRE ATT&CK (11)

Vendors (19)

Products (14)

Tools (8)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.