Mozi

Malware updated 11 days ago (2024-08-28T10:17:55.624Z)
Download STIX
Preview STIX
Mozi is a type of malware, a malicious software designed to exploit and damage computer systems and devices. It typically infiltrates systems through suspicious downloads, emails, or websites, often unbeknownst to the user. Once inside, it can steal personal information, disrupt operations, or even hold data hostage for ransom. Mozi is particularly notorious for its ability to form botnets, networks of hijacked devices, which are then used to carry out various cyber attacks. In 2021, the Mozi botnet was responsible for an alarming 74% of all Internet of Things (IoT) attacks. The Mozi botnet saw significant growth from Q3 2021 onwards, with over 5 million detections reported in the early months of 2022. Most of the malware samples detected were from well-known malware families such as Mirai, Gafgyt, and Mozi itself. The Mozi botnet became infamous for exploiting outdated and vulnerable IoT devices, hijacking hundreds of thousands of internet-connected devices each year. This exploitation of weak points in IoT device security underlines the importance of keeping such devices updated and secure. As of my knowledge cutoff in September 2021, the identity of the individuals or group behind the Mozi Botnet kill switch was not publicly known. The Mozi botnet, like many similar cyber threats, is likely operated by sophisticated cyber criminals or state-sponsored entities. However, without specific evidence or further updates, it is impossible to definitively identify who is behind the Mozi Botnet kill switch.
Description last updated: 2024-08-28T10:16:02.564Z
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Mozi Botnet
5
The Mozi botnet, a form of malware, wreaked havoc on the internet from 2019 to 2023. During this period, it became the largest botnet in existence, incorporating over 1.5 million unique devices into its network. The botnet primarily exploited known vulnerabilities in NETGEAR DGN devices and JAWS web
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Botnet
Malware
Eset
Bot
Exploit
Payload
Android
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Malware
To see the evidence that has resulted in these malware associations, create a free account
IDTypeVotesProfile Description
MiraiUnspecified
5
Mirai is a type of malware that specifically targets Internet of Things (IoT) devices such as smart speakers, cameras, and connected home equipment. It exploits weak Telnet (port 23) and SSH (port 22) credentials to gain control over these devices. Once infected, these devices are then incorporated
KinsingUnspecified
2
Kinsing is a malicious software, or malware, that has been recently observed exploiting vulnerabilities in systems. It operates by infiltrating computers or devices, often undetected, through suspicious downloads, emails, or websites. Once inside, Kinsing can wreak havoc by stealing personal informa
MagecartUnspecified
2
Magecart is a form of malware, malicious software designed to exploit and damage computer systems. It typically infiltrates systems through suspicious downloads, emails, or websites, often unbeknownst to the user. Once inside a system, Magecart can steal personal information, disrupt operations, or
Lumma StealerUnspecified
2
Lumma Stealer is a potent and elusive malware that targets sensitive information on victims' devices, including cryptocurrency wallets and two-factor authentication browser extensions. This malicious software infiltrates systems through dubious downloads, emails, or websites, often unbeknownst to th
GafgytUnspecified
2
Gafgyt, also known as Bashlite, is a type of malware that targets Linux architecture operating systems with the primary intent to launch distributed denial of service (DDoS) attacks. This malicious software infiltrates systems often through suspicious downloads, emails, or websites, and upon entry,
Source Document References
Information about the Mozi Malware was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
ESET
11 days ago
Old devices, new dangers: The risks of unsupported IoT tech
Securityaffairs
5 months ago
Security Affairs newsletter Round 466 by Pierluigi Paganini
Securityaffairs
5 months ago
Security Affairs newsletter Round 465 by Pierluigi Paganini
Securityaffairs
5 months ago
Security Affairs newsletter Round 464 by Pierluigi Paganini
Securityaffairs
6 months ago
Security Affairs newsletter Round 463 by Pierluigi Paganini
Securityaffairs
6 months ago
Security Affairs newsletter Round 462 by Pierluigi Paganini
Securityaffairs
6 months ago
Security Affairs newsletter Round 461 by Pierluigi Paganini
Securityaffairs
6 months ago
Security Affairs newsletter Round 460 by Pierluigi Paganini
CERT-EU
7 months ago
Sensor Intel Series: Top CVEs in December 2023
Securityaffairs
7 months ago
Security Affairs newsletter Round 459 by Pierluigi Paganini
Securityaffairs
7 months ago
Security Affairs newsletter Round 457 by Pierluigi Paganini
ESET
7 months ago
ESET Research Podcast: ChatGPT, the MOVEit hack, and Pandora
Securityaffairs
7 months ago
Security Affairs newsletter Round 456 by Pierluigi Paganini
Securityaffairs
8 months ago
Security Affairs newsletter Round 454 by Pierluigi Paganini
CERT-EU
8 months ago
Experts predict India in for cybersecurity woes in 2024 | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting
Securityaffairs
8 months ago
Security Affairs newsletter Round 454 by Pierluigi Paganini
Securityaffairs
8 months ago
Security Affairs newsletter Round 453 by Pierluigi Paganini
CERT-EU
8 months ago
650,000+ Malicious Domains Registered Resembling ChatGPT | #hacking | #cybersecurity | #infosec | #comptia | #pentest | #ransomware | National Cyber Security Consulting
Securityaffairs
8 months ago
Security Affairs newsletter Round 452 by Pierluigi Paganini
CERT-EU
8 months ago
Security Affairs newsletter Round 452 by Pierluigi Paganini | #ransomware | #cybercrime | National Cyber Security Consulting