Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO

Reported 03 Jun 2026 by otx · Severity: medium

A new Gafgyt botnet variant named C0XMO has been discovered that spreads by exploiting a stack buffer overflow vulnerability in DD-WRT router firmware. Unlike earlier versions, this malware separates its lateral movement capabilities into a standalone Python script, enabling more