> TritonInfoSec News
Home / Aug 16, 2026 / Story
0
#9 BleepingComputer general August 15, 2026 at 14:14 UTC

New Evooo1Bot Linux botnet turns routers into traffic relay nodes

By Bill Toulas

AI Summary

A new Mirai-based modular Linux botnet dubbed Evooo1Bot is actively targeting internet-facing gateway devices and converting compromised routers into SOCKS5 traffic relay nodes. The use of SOCKS5 proxying is a classic technique for obfuscating C2 traffic and enabling follow-on attacker operations through victim infrastructure. Network defenders should audit exposed gateway devices for signs of compromise and restrict unnecessary outbound SOCKS traffic.

Read full article → https://www.bleepingcomputer.com/news/security/new…

Relevance score: 70.0/100

# More from August 16

  1. 1
    Vulnerability giving attackers full control of Macs is under active exploitation Ars Technica Security
  2. 2
    Shell investigates 'potential incident' after Clop data theft claims BleepingComputer
  3. 3
    1.6 Million Likely Impacted by RingCentral Data Breach SecurityWeek
  4. 4
    Over 1,000 Charities Hit by Beacon CRM Data Breach SecurityWeek
  5. 5
    France investigates tax authority breach after hacker claims 600,000 victims The Record
  6. 6
    Black Hat USA 2026: What the Hugging Face hack tells us about human responsibility WeLiveSecurity (ESET)
  7. 7
    AmnesiaStealer macOS Malware Steals Data, Controls Browser Sessions SecurityWeek
  8. 8
    Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal SecurityWeek
  9. 10
    14,000 Trezor Customers Impacted by Data Breach at ShipMonk SecurityWeek