Mozi

ATP Sandbox Adv. HeuristicsAVNetskope IPS

Stats

First seen: November 2023
Last seen: September 2026

Alert name variants

Alert Name	Engine
Linux.Backdoor.Mozi	ATP Sandbox Adv. Heuristics
Linux.Mozi.F	AV
Linux.Mozi.I	AV
Linux.Mozi.J	AV
Linux.Mozi.L	AV
Linux.Mozi.M	AV
Linux.Mozi.P	AV
Linux.Trojan.Mozi	ATP Sandbox Adv. Heuristics
Linux.Worm.Mozi	ATP Sandbox Adv. Heuristics
Trojan.Linux.Mozi.1	AV
Trojan.Linux.Mozi.11	AV
Trojan.Linux.Mozi.19	AV
Trojan.Linux.Mozi.2	AV
Trojan.Linux.Mozi.21	AV
Trojan.Linux.Mozi.6	AV
Win32.Trojan.Mozi	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
MALWARE-OTHER Unix.Trojan.Mozi variant outbound connection attempt	IPS-SWG

Related blogs

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

October 23, 202510 min read

Netskope Threat Coverage: Night Sky

Netskope Threat Coverage: Night Sky

January 11, 20223 min read

CORS Exploitation in the Cloud

CORS Exploitation in the Cloud

January 9, 20209 min read

CapitalInstall hosted and served via IaaS

CapitalInstall hosted and served via IaaS

December 11, 20186 min read

Ongoing email campaign spreading GlobeImposter Ransomware

Ongoing email campaign spreading GlobeImposter Ransomware

September 5, 20176 min read

Obfuscated Javascript Malware using Cloud Services

Obfuscated Javascript Malware using Cloud Services

May 17, 20175 min read

Cloud CRM Services as a Malware Attack Vector

Cloud CRM Services as a Malware Attack Vector

February 9, 20176 min read

URSNIF Data Theft Malware Shared on Microsoft OneDrive

URSNIF Data Theft Malware Shared on Microsoft OneDrive

August 2, 20165 min read

Vulnerability Found in Uploading.com

Vulnerability Found in Uploading.com

June 17, 20142 min read

Related families

Silver Cobalt Strike Disco Evil W97m