THREATOPS
THREAT OPS › Threat News › Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO

Inside the Cross-Platform Propagation of a New Gafgyt Variant C0XMO

lowfortinet_researchPublished 2026-06-03

<p>FortiGuard Labs analyzes C0XMO, a new Gafgyt variant leveraging DD-WRT exploitation and multi-architecture propagation to expand IoT botnet infections.</p><img align="left" alt="" border="0" height="1" hspace="0" src="https://feeds.fortinet.com/~/i/957685901/0/fortinet/blog/threat-research" style="border: 0; float: left; margin: 0; padding: 0; width: 1px!important; height: 1px!important;" width

Indicators of compromise

Original source: https://feeds.fortinet.com/~/957685901/0/fortinet/blog/threat-research~Inside-the-CrossPlatform-Propagation-of-a-New-Gafgyt-Variant-CXMO