Filed under: Cybersecurity — Network Security — August 2026
What happened
Researchers uncovered a new botnet called “Evooo1Bot” that’s been hijacking internet-facing routers and firewalls since at least July by exploiting 18 known vulnerabilities — some dating back to 2007 — in devices from NETGEAR, TP-Link, D-Link, Zyxel, Tenda, and Alcatel. Once in, it turns the device into a traffic relay for other attacks, brute-forces SSH logins, sniffs credentials, and can be aimed at other targets in denial-of-service attacks. This is confirmed active exploitation, not a proof of concept, and infections have been tracked across North America, Europe, and Asia.
Why it matters to your business
Every one of these brands shows up in small-business networks around Phoenix — often installed years ago and never touched again. None of these are new, unpatched zero-days; they’re old, well-known bugs in devices that missed firmware updates or were simply never replaced. A hijacked router doesn’t just slow down your internet — it gives an attacker a foothold inside your network and a launchpad they can use to attack other companies from your office’s IP address.
What to do this week
Log into the admin panel of every router, firewall, and network camera in your office (check the label on the device for the default address, often 192.168.0.1 or 192.168.1.1) and check the firmware version against the vendor’s current release — most of these brands publish updates on their support sites. Turn off remote/WAN administration access unless you specifically need it; that’s the main way these devices get exploited. If a device is past its vendor’s support window and no longer gets firmware updates at all, budget to replace it — an unpatchable router is a permanent open door.
The bigger picture
Attackers don’t need a fresh zero-day when so many small businesses are still running network hardware that hasn’t been updated in years — old, cheap-to-fix bugs are doing the work just fine. — The Myth of Old Tech: How Outdated Equipment Is Costing You More
Not sure how old the firmware is on your office router or firewall? Book a free consult — https://micro1tech.com/contact/