IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Your Exposure
TLP:WHITE1 IOC

Evooo1Bot Linux Botnet Hijacks Routers and Firewalls for DDoS, SOCKS5 Proxy and Credential Theft

CP
Cyber Press
Published August 17, 2026Original Report

Malware Families

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYunknownINFRASTRUCTUREhttp://91.92.40.118/w…CAPABILITYMiraiXorDDoSVICTIMunknown
Adversary
Infrastructure(1)
Capability(2)
Victim

Indicators of Compromise

Indicators of Compromise1

TypeIndicatorConfidenceScoreFirst Seen
URLhttp://91.92.40.118/wget.sh
botnetc2intel-blog
High
86
Jul 7, 26

IOC Relationship Graph

IOC Relationship Graph1 total IOCs
URL
URL1Malware2REPORTEvooo1Bot Linux Botnet HijMiraiXorDDoS
scroll to zoom · drag to pan · click IOC to open