Mozi
Mozi is a IoT botnet, that makes use of P2P for communication and reuses source code of other well-known malware families, including Gafgyt, Mirai, and IoT Reaper.
C2 Infrastructure
Last 7 days
| Date | C2 Hosts |
|---|---|
| Mar 23, 2026 | 1 |
Further Reading
The Androxgh0st botnet, an emerging cyber threat since January 2024, has resurfaced with advanced capabilities and integration of IoT-focused Mozi payloads. Exploiting over 20 vulnerabilities in te...
CrowdStrike has observed that malware targeting Linux-based systems increased by 35% in 2021. XorDDoS, Mirai and Mozi were the most common malware families.
The Mozi botnet is an ongoing malware campaign targeting unsecured and vulnerable networking devices. This post will showcase the analyst journey of collecting, analyzing, and operationalizing thre...
Mozi is a peer-to-peer (P2P) botnet that uses a BitTorrent-like network to infect IoT devices such as network gateways and digital video records (DVRs). It works by exploiting weak telnet passwords...
Packing is a key technique to stymie reverse engineering botnet code. Learn more about packers used by IoT malware, and how to analyze packed samples.
It can be challenging to disrupt the malicious activities of P2P botnets. Find out how to protect your OT/IoT networks against them.