#consumer-devices

3 articles

The botnet does not want your router for a DDoS — it wants to sell your address as a residential proxy

2026-08-18Security

Fortinet has tracked Evooo1Bot since July 2026 across Alcatel, NETGEAR, Tenda, Mitsubishi Electric, Telesquare and D-Link gateways. It picks one of twelve builds to match your CPU, clears Bash history, and turns the device into a SOCKS5 node.

Chrome is blocking 7 billion unwanted Android notifications a day — and rate-limiting the worst sites to 1,000 a minute

2026-08-14Gadgets

Google published Q1 2026 figures for its notification abuse work: automatic permission revocation for inactive sites, HTTP 429s past a threshold, and network-level analysis of coordinated service workers.

This botnet's DDoS traffic looks like Chrome because it builds a complete browser fingerprint

2026-08-13Gadgets

Unit 42's analysis of Kimwolf v7 describes HTTP/2 floods that mirror real browser behaviour at the protocol and header level. It runs on Android TV boxes with port 5555 open, and resolves its C2 through Ethereum Name Service.