{"uuid": "ee1192f4-a16e-4350-8ceb-e67108bf0a1f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-35394", "type": "seen", "source": "https://infosec.exchange/users/tomcat/statuses/117389061261750123", "content": "\ud83d\udea8 Cling hides C2 commands in STUN traffic as threat actors were observed attempting to exploit Realtek Jungle SDK flaw CVE-2021-35394. A subset of that activity delivered the botnet.\nRead how Cling uses STUN for command-and-control, persistence, propagation, proxying, tunneling, and DoS: https://thehackernews.com/2026/10/realtek-jungle-sdk-exploit-attempts.html", "creation_timestamp": "2026-10-05T15:42:04.406224Z"}