Evooo1Bot Linux Botnet Exploits Vulnerabilities to Create SOCKS5 Proxies

The Evooo1Bot Linux botnet leverages known vulnerabilities to compromise edge devices, transforming them into SOCKS5 proxies for covert operations. It employs encrypted C2 communication, credential theft, and DDoS capabilities while exploiting 20+ CVEs across IoT and network devices.

Cybersecurity researchers have flagged a previously undocumented Linux botnet family dubbed Evooo1Bot that derives its core functionality from the Mirai botnet source code and is equipped to turn internet-facing devices into SOCKS proxies.

"While the malware reuses the DDoS engine from the publicly leaked Mirai source code, it extends the original framework with numerous capabilities, including

Read original article