C0XMO Botnet Targets DD-WRT Routers and Eliminates Competing Malware

A new variant of the Gafgyt botnet, known as C0XMO, is actively exploiting a vulnerability in DD-WRT firmware used in multiple routers. Attackers leverage this flaw to distribute malicious code across devices with different processor types, making the attack highly versatile.

A key feature of C0XMO is its ability to detect and remove other malware already present on the infected device. This enables the botnet to monopolize router resources and use them for DDoS attacks or other cybercriminal activities.

Experts warn that the DD-WRT vulnerability could be exploited not only for spreading C0XMO but also for other types of attacks. Users are advised to update their device firmware to the latest version and monitor their networks for suspicious activity.