Telesquare

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenAug 13, 2026
Last mentionedAug 17, 2026

Timeline

2 articles · newest first

Evooo1Bot Linux Botnet Exploits Known Flaws to Turn Edge Devices Into SOCKS5 Proxies

Fortinet researchers documented Evooo1Bot, a new Mirai-derived Linux botnet active since July 2026 that exploits known edge-device flaws to build SOCKS5 proxy networks.

The Hacker NewsAug 17, 09:29 UTC · Aug 17, 2026MalwareExploitedCVE-2007-3010 CVE-2016-6277 CVE-2018-14558+151 · 1 read

New Mirai variant adds stealth capabilities to notorious botnet code

FortiGuard Labs reports new Mirai-derived botnet Evooo1Bot actively exploits unpatched routers and edge devices, adding encrypted C2, stealthy SSH scanning, and proxying.

The RecordAug 13, 15:57 UTC · Aug 13, 2026MalwareExploited2 · 1 read

Related CVEs

by mentions

CVE-2018-145589%9.8
Unauthenticated Command Injection in Tenda AC7, AC9, and AC10 Routers
published Oct 30, 2018Tenda AC7 router firmwareKEVPoC
CVE-2022-29464100%9.8
Unrestricted file upload leading to unauthenticated RCE in multiple WSO2 products
published Apr 18, 2022WSO2KEVRansomwarePoC ×2
CVE-2020-1098780%9.8
Unauthenticated OS Command Injection in Tenda AC15 AC1900 Router
published Jul 13, 2020Tenda AC15 AC1900 router firmwareKEVPoC
CVE-2022-3705556%9.8
Unauthenticated Buffer Overflow in D-Link GO-RT-AC750 Router Firmware
published Aug 28, 2022D-Link GO-RT-AC750 (rev A) router firmwareKEVPoC
CVE-2024-4577100%9.8
OS Command Injection in Windows PHP-CGI Allows Remote Code Execution
published Jun 9, 2024PHP Group PHPKEVRansomwarePoC ×11
CVE-2022-26134100%9.8
Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center
published Jun 3, 2022Atlassian Confluence ServerKEVRansomwarePoC ×2
CVE-2007-301097%—
Command Injection RCE in Alcatel OmniPCX Enterprise masterCGI
published —Alcatel OmniPCX Enterprise Communication Server (Unified Maintenance Tool / masterCGI)KEV
CVE-2021-4642294%9.8
Telesquare SDT-CW3B1 1.1.0 is affected by an OS command injection vulnerability that allows a remote attacker to execute OS commands without any authentication
published Apr 27, 2022telesquare sdt-cs3b1 firmwarePoC ×2
CVE-2024-1091498%9.2
OS Command Injection in D-Link DNS-320/320LW/325/340L NAS Firmware
published Nov 6, 2024D-Link DNS-320 firmwarePoC
CVE-2024-292696%8.8
An issue discovered in Telesquare TLR-2005Ksh 1.0.0 and 1.1.4 allows attackers to run arbitrary system commands via the Cmd parameter
published Apr 10, 2024telesquare tlr-2005ksh firmwarePoC

Appears with

D-Linkvendor · 2
Evooo1Botmalware · 2
Tendavendor · 2
Fortinetvendor · 2
Miraimalware · 2
Alcatelvendor · 1
KimWolfmalware · 1
AC10product · 1
AC7product · 1
FortiGuard Labsvendor · 1
WSO2vendor · 1
FortiGuard Labsproduct · 1
Netgearvendor · 1
Mitsubishi Electricvendor · 1
Atlassianvendor · 1
TLR-2005KSHproduct · 1

Entities are extracted by the model from each article. First seen Aug 13, 2026, last mentioned Aug 17, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.