medium
advisory
New Mozi Indicators of Compromise
ThreatFox listed 8 new Mozi indicators of compromise (elf.mozi) first seen on 2026-11-04 UTC.
Triage facts
Revision 1- Evidence
- Unknown
- Severity
- Medium
- Sources
- 2 public sources
- Freshness
- Revision 1Nov 5, 13:29 UTC
- Detection
- 8 IOCs
- Source quality
- B2Roughly even chance
ThreatFox has identified 8 new URLs associated with the Mozi (elf.mozi) malware. All indicators are categorized as payload_delivery.
Indicators of compromise
8
url
| Type | Value |
|---|---|
| url | http://103.213.112.98:33872/Mozi.7 |
| url | http://139.135.40.157:41777/Mozi.m |
| url | http://103.82.121.8:48818/Mozi.m |
| url | http://123.10.155.244:48308/Mozi.a |
| url | http://103.244.172.242:50277/Mozi.m |
| url | http://202.47.55.104:33505/Mozi.a |
| url | http://153.117.50.75:44089/Mozi.m |
| url | http://153.117.37.137:39548/Mozi.m |