NEW EVOOO1BOT BOTNET HIJACKS ROUTERS

Evooo1Bot uses a modular architecture to deliver customized payloads to compromised routers and other gateway devices. Once infected, the devices function as SOCKS5 proxies, allowing attackers to route traffic through the compromised network infrastructure. The botnet's design builds on the Mirai framework, which pioneered large-scale IoT device compromises. By targeting internet-facing gateways specifically, Evooo1Bot gains access to positions within networks that can amplify its reach and effectiveness. The conversion of routers into relay nodes provides attackers with infrastructure for masking traffic origins, conducting reconnaissance, and distributing additional malware. Organizations should prioritize patching gateway devices, implementing network segmentation, and monitoring for unusual traffic patterns to detect compromised equipment. Security teams are tracking the botnet's spread and advising administrators to change default credentials and disable unnecessary remote management features on network devices.