Data4Cyber publishes labeled OT attack data for a lab distribution grid
The lab DMS dataset pairs 1-second process data with Modbus/TCP and MQTT captures across one benign run and six attacks.
Stories per day · 30 days
Relatediot2clustering1dataset1distribution-grid1earthrover1firmware1flow-generation1frodobots1hardcoded-credentials1home-automation1intrusion-detection1libwebsockets1local-control1modbus1ot-security1out-of-bounds-write1remote-code-execution1smart-home1
11 stories, newest first · one card per story
Stories tagged #mqtt
FrodoBots EarthRover Mini+ firmware flaws enable remote root control
Hard-coded AWS and MQTT credentials enable fleet-wide root commands; the vendor says fixes are in the latest firmware.
1
libwebsockets MQTT PUBACK handling flaw allows unauthenticated RCE
ZDI rates CVE-2026-114550 at 8.1; no login is required, and no fixed version is named.
MQTT flow-tool choice changes clustering across public datasets
More than 380,000 flows from four datasets were built with Zeek-flowmeter, Argus, and NTLFlowLyzer, and no tool won every test.
LLM-Driven Multi-Agent Control for Skill-Based Smart Manufacturing
LLM agents controlling a simulated six-module factory reach a 93% solve rate and diagnose silent faults.
lwIP TCP/IP Stack MQTT Client Application
CISA warns lwIP MQTT client versions 2.0.1 through 2.2.1 have critical CVE-2026-87121.
Linux BambooToken Malware Uses MQTT C2 for Remote Shell Access and File Exfiltration
A Linux BambooToken backdoor uses MQTT on port 2883 for profiling, shell commands, and file theft.
3
Bransys ELD
CISA reports Bransys ELD apps ship hardcoded MQTT and FTP credentials plus cleartext transport, exposing real-time telemetry for connected fleet devices.
BambooToken: The Malware That Speaks MQTT to Stay Under the Radar
Lumen's Black Lotus Labs uncovered BambooToken, a Windows and Linux malware family using MQTT broker-based C2 and DLL sideloading across Asia since February 2023.
3
BambooToken Malware Uses MQTT to Control Windows and Linux Systems
Lumen uncovers BambooToken, a stealthy multi-platform malware using MQTT C2 and Tendyron DLL sideloading to compromise Asian and South American organizations.
7
BambooToken malware controls Windows and Linux systems via MQTT
Lumen Black Lotus Labs exposes BambooToken, a China-aligned malware framework using MQTT C2 to backdoor Windows and Linux systems at roughly a dozen enterprises.
2