Frequency
4
occurrences
First Seen
November 26, 2025
Last Seen
June 5, 2026
Related Threat Clusters
-
C0XMO Gafgyt Variant Exploits DD-WRT Routers via CVE-2021-27137
A new Gafgyt botnet variant named C0XMO has emerged, targeting DD-WRT routers by exploiting CVE-2021-27137, a buffer overflow vulnerability in the UPnP service. This malware employs a Python-based scanner to propagate…
6 articles · Updated June 5, 2026 -
ShadowV2 Botnet Exploits AWS Outage to Target IoT Devices Globally
During the major AWS outage in October 2025, a Mirai-based botnet named ShadowV2 was identified infecting IoT devices across 28 countries. The botnet exploited known vulnerabilities in devices from manufacturers like…
4 articles · Updated November 26, 2025
Recent Intelligence Reports
- New Gafgyt Variant Targets Multiple Linux Architectures With Modular Propagation — Cybersecuritynews · June 5, 2026
- C0XMO Gafgyt Variant Spreads Through DD-WRT Routers — Socprime · June 5, 2026
- New Gafgyt Variant Targets Linux Systems With Modular Spread Tactics — Gbhackers · June 5, 2026
- Botnet takes advantage of AWS outage to smack 28 countries — Theregister · November 26, 2025