---
title: "Discussion on \"Exploiting 20+ CVEs to Build Hidden Proxies: Analyzing ClingSTUN's Attack Chain\" | Hashnode"
description: "Discussion on \"Exploiting 20+ CVEs to Build Hidden Proxies: Analyzing ClingSTUN's Attack Chain\". Campaign Overview\nIn early October 2026, threat research experts at FortiGuard Labs announced the discovery of a large-scale Linux malware campaign called ClingSTUN. Operating as a back-connect proxy"
url: "https://hashnode.com/posts/exploiting-20-cves-to-build-hidden-proxies-analyzing-clingstun-s-attack-chain/6ad6e8ef1208055693fa775d"
---

[Feed](https://hashnode.com/feed) /

Discussion

# [Exploiting 20+ CVEs to Build Hidden Proxies: Analyzing ClingSTUN's Attack Chain](https://blog.fiscybersec.com/exploiting-20-cves-to-build-hidden-proxies-analyzing-clingstun-s-attack-chain?utm_source=hashnode&utm_medium=feed)

Campaign Overview In early October 2026, threat research experts at FortiGuard Labs announced the discovery of a large-scale Linux malware campaign called ClingSTUN. Operating as a back-connect proxy

Oct 20 · 14 min read · blog.fiscybersec.com  
Read the article

-   [#threat-intelligence](https://hashnode.com/tag/threat-intelligence)
-   [#proxy](https://hashnode.com/tag/proxy)
-   [#linux-backdoor](https://hashnode.com/tag/linux-backdoor)
-   [#clingstun](https://hashnode.com/tag/clingstun)
-   [#shellcode](https://hashnode.com/tag/shellcode)
-   [#n-day-command-injection](https://hashnode.com/tag/n-day-command-injection)

## Written by

[Lưu Tuấn Anh](https://hashnode.com/@anhlt120)

@anhlt120

  
[View profile](https://hashnode.com/@anhlt120)

## Responses

Markdown supported · ⌘↵ to post

No responses yet.