Evooo1Bot Linux Botnet Uses 16 DDoS Methods and SOCKS5 Proxies to Hijack Edge Devices
This story is only covered by news sources that have yet to be evaluated by the independent media monitoring agencies we use to assess the quality and reliability of news outlets on our platform. Learn more here.3 Articles
3 Articles
The Evooo1Bot botnet emerges as a new threat for Linux devices exposed to the internet, combining inherited features of the Mirai with resources aimed at transforming edge devices into SOCKS5 proxies. The strategy considerably expands the impact of an infection: in addition to participating in DDoS attacks, a router, gateway or other compromised equipment can become an intermediary for third-party traffic. Behaviour draws attention because it sh…
Evooo1Bot Linux Botnet Uses 16 DDoS Methods and SOCKS5 Proxies to Hijack Edge Devices
A newly tracked Linux botnet is turning exposed edge devices into tools for disruption, remote access, and traffic relaying. Evooo1Bot is the threat that reaches internet-facing edge systems by exploiting known flaws and attempting weak SSH logins. Its operators can then issue commands through an encrypted control channel. The campaign is more than another basic denial-of-service operation. It combines code drawn from the leaked Mirai framework …
Evooo1Bot Hijacks Linux Routers for Proxying, Credential Theft and DDoS Attacks
A new Linux botnet named Evooo1Bot is turning internet-facing routers and other gateway devices into SOCKS5 traffic relay nodes, giving attackers a way to route malicious connections through compromised systems while retaining the ability to steal credentials, brute-force SSH accounts, exploit vulnerable devices and launch DDoS attacks. FortiGuard Labs said it has been tracking the Mirai-based malware since at least July 2026, with activity obse…
Coverage Details
Bias Distribution
- There is no tracked Bias information for the sources covering this story.
Factuality
To view factuality data please Upgrade to Premium
