Come To Think of It...

There's a new botnet prowling the internet, and unlike its Mirai ancestors that just wanted to DDoS your favorite CDN into a brownout, Evooo1Bot is playing a longer game. Discovered back in July by FortiGuard Labs researcher Cara Lin, this modular Linux-based malware doesn't just chew up bandwidth — it quietly turns compromised routers and gateway devices into SOCKS5 relay nodes that can be chained into proxy networks for all sorts of downstream purposes. What makes Evooo1Bot particularly interesting to folks who actually maintain edge devices is the breadth of its exploit arsenal. Fortinet's telemetry showed it hammering through a dozen known CVEs across hardware from Alcatel, NETGEAR, Tenda, D-Link, Mitsubishi Electric, and Telesquare — spanning vulnerabilities as old as CVE-2007-3010 (Alcatel OmniPCX Enterprise) and as recent as CVE-2025-10123 (D-Link DIR-823X). That CVE-2007 entry is 19 years old and the router it affects has probably been gathering dust in a cabinet ...