OTX Threat: Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO
A new Gafgyt botnet variant named C0XMO has been discovered that spreads by exploiting a stack buffer overflow vulnerability in DD-WRT router firmware. Unlike earlier versions, this malware separates its lateral movement capabilities into a standalone Python script, enabling more efficient targeting of various system architectures including ARM, MIPS, PowerPC, and x86. The malware establishes pers CVEs: CVE-2015-2051, CVE-2022-35914, CVE-2021-27137, CVE-2016-15047, CVE-2025-34054 Sectors: Techno