IoT Botnet C0XMO Adds Competitor-Killing Capability

FortiGuard Labs identified C0XMO, a new variant of the Gafgyt IoT botnet that exploits an unpatched DD-WRT UPnP stack overflow (CVE-2021-27137) and multiple other device vulnerabilities to infect many architectures, persist via hidden copies and cron/profile modifications, remove competing malware, and enable large-scale DDoS operations using a modular design with a separate Python scanner and extensive attack modules.