Malware
C0XMO
- First Reported
- Jun 5, 2026
- Latest Reported
- Jun 7, 2026
Reported Context (2)
- Fortinet researchers uncovered C0XMO, a new and more modular Gafgyt botnet variant that targets DD-WRT routers and can spread across many CPU architectures and device types. C0XMO Botnet Exploits DD-WRT Flaw, Spreads Across Devices and Removes Rival Malware
- FortiGuard Labs analyzed C0XMO, a modular Gafgyt botnet variant that exploits CVE-2021-27137 on vulnerable DD-WRT routers and uses a separate Python scanner to expand infections across Linux and IoT devices. FortiGuard Details C0XMO Gafgyt Botnet’s Cross-Platform Propagation
CVE (5)
Malware (1)
MITRE ATT&CK (18)
Vendors (1)
Products (5)
Industries (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.