Evooo1Bot is a Linux botnet family derived from the Mirai source code, active since July 2026. It exploits known vulnerabilities to compromise edge devices and turn them into SOCKS5 proxies. It features encrypted C2 communications, SSH brute-forcing, credential sniffing, and an exploit arsenal for multiple CVEs.