New Evooo1Bot Linux botnet turns routers into traffic relay nodes

A new Mirai-based modular Linux botnet malware called Evooo1Bot has been targeting internet-facing gateway devices, turning them into SOCKS5 traffic relay nodes. [...]

• bleepingcomputer.com/news/security/new-evooo1bot-linux-botnet-turns-routers-into-traffic-relay-nodes/ (opens in a new tab)

• Not All That Glitters Is Gold: Tracking CopperDragon’s Sparrow Framework Around the GlobeMalware2026-11-10
• ZDI-26-998: Linux Kernel KSMBD SMB Direct Integer Underflow Remote Code Execution VulnerabilityCriticalVulnerability2026-11-13
• ZDI-26-999: Linux Kernel Proc File System Pagemap Scan Use-After-Free Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1000: Linux Kernel GSM Multiplexing Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13
• ZDI-26-1001: Linux Kernel SCTP Subsystem Race Condition Local Privilege Escalation VulnerabilityHighVulnerability2026-11-13