Sumokoin has a difficulty more responsive to hashrate surges (botnets, cpu farms or nicehashers with big rates) leaving attackers much less profitable.
The standard cryptonote algo had a huge lag and the difficulty reached the value it should have according to the current global hashrate after many blocks.
These blocks where up for grabs from anyone applying a huge high rate, either botnet or nicehasher.
With the new difficulty algo, difficulty gets almost instantly (after a couple of blocks) the correspondive value relative to the global hashrate so the botnet or the nicehasher gets the rewards that he deserves respectively to his applied hashrate without any extra benefit.
This led to the fact that botnets have moved to coins where they can earn fast by manipulating their diff algo lag and prefer not to mine Sumokoin.
We do have from time to time botnets joining, especially when the coins becomes very profitable say by a spike of its price, however they leave after a couple of blocks cause even then the relative rewards that they get is less than would have get by mining a standard algo coin.