Mozi Botnet Using AndroxGh0st Toolkit to Target Cloud Environments (Campaign)
ID: e03280a5-11d6-564a-9f52-6dbb10eeea23
STIX ID: report--e03280a5-11d6-564a-9f52-6dbb10eeea23
Feed Name: Wiz Cloud Threat Landscape
Threat Score
Date Published: 2024-11-06
Date Updated: 2026-05-01
Author: [email protected] (Wiz Threat Research)
...
...
CloudSEK reports that the Mozi botnet has resurfaced under the name AndroxGh0st, describing a renewed exploitation wave that leverages prior Mozi infrastructure and likely expands targeting and capabilities; the article summarizes observed behaviors, attack vectors, and defensive guidance for affected organizations.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.