MalwareBleeping Computer
9.0 — CRITICAL
New Evooo1Bot Linux botnet turns routers into traffic relay nodes
A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]
🤖 AI BriefingAuto-generated threat analysis
🔍Threat Overview
Evooo1Bot is a Mirai-based modular Linux botnet that targets internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes and exploiting known vulnerabilities for credential theft, SSH brute-forcing, and DDoS attacks.
⚙️Technical Details
Affected Systems
AlcatelNETGEARTendaMitsubishi ElectricTelesquareD-Link
Attack Vectors
known vulnerabilitiesvulnerable Hikvision camerasAtlassian ConfluenceZyxel firewallsTP-Link routersD-Link NAS devicesWSO2 productsKubernetes ingress-nginxvulnerable PHP-CGI installations
💥Impact Assessment
Severity: critical
Who Is at Risk
Internet-facing gateway device ownersOrganizations with vulnerable IoT devicesSeverity: critical
🛡️Recommended Actions
1Keep firmware updated for IoT devices
2Replace default admin credentials and turn off remote access panels
3Replace devices when vendor no longer provides support
📦Affected Products
Alcatel devicesNETGEAR devicesTenda devicesMitsubishi Electric devicesTelesquare devicesD-Link devicesHikvision camerasAtlassian ConfluenceZyxel firewallsTP-Link routersD-Link NAS devicesWSO2 productsKubernetes ingress-nginxvulnerable PHP-CGI installations
Read the full article
This is a curated summary. The complete article is available at Bleeping Computer.