CYBERSECURITYTRACKER
TRACKING
Permanent story citation

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

This page keeps the story as Cybersecurity Tracker first published it. If the tracker later corrects it, the correction appears below the original and never replaces it.

Back to newsStory 4480

As cited

Copy frozen at (site build).

threat intel

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

A new Linux botnet called Evooo1Bot, derived from Mirai code, targets internet-facing routers and gateway devices to compromise them into SOCKS5 proxy relay nodes. The malware modulates its behavior to optimize its effectiveness across different network environments.

Why it matters: Network administrators and ISP operators managing gateway and router infrastructure face threats from compromised devices being weaponized for traffic relay and potential lateral movement; patching exposed devices and segmenting networks should be prioritized.

Source published
First seen by Cybersecurity Tracker

Source attribution

Glossary