Cling botnet hides C2 in STUN traffic, spreads via Realtek SDK flaw
Nozomi Networks says the Cling botnet rides a spike in CVE-2021-35394 Realtek SDK exploitation and tunnels its command channel through 13 public STUN servers to blend into normal traffic.