Mozi Botnet
IoT P2P botnet
Source Attribution
- Origin
- MITRE
- Source
- Researchers
- Verified
- 2026-08-26T16:07:01.550Z
- Confidence
- high
Source: Researchers · Verified: 2026-08-26T16:07:01.550Z · Confidence: high
Security Timeline
- discovered Mozi Botnet first observed
- updated Encyclopedia entry reviewed (Phase 45C)
Quick Answer
Mozi is a P2P IoT botnet exploiting weak credentials and router RCEs for DDoS and proxy abuse. (attributes recorded from Researchers).
Definition
Mozi is a P2P IoT botnet exploiting weak credentials and router RCEs for DDoS and proxy abuse.
Overview
Mozi is a P2P IoT botnet exploiting weak credentials and router RCEs for DDoS and proxy abuse.
Behavior
- P2P
- exploits IoT RCEs
- DDoS
First Seen
2019-09
Target
IoT P2P botnet
Malware Intelligence
Family: Mozi Botnet
Techniques: T1059, T1071
Targets: IoT P2P botnet
Behavior:
- P2P
- exploits IoT RCEs
- DDoS
References
Have a follow-up question?
Ask AI about this Start an investigation Ask OpenTrojan's evidence-backed assistant about this topic — answers cite their sources.