MikeTrendsTrends right now

Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #8

China Unicom IP flagged for Mozi malware distribution

Original: IP 125.41.211.84 (China Unicom) is flagged for Mozi malware distribution, low confidence but worth a look in your logs.

A cybersecurity researcher has flagged IP address 125.41.211.84, registered to China Unicom, as a suspected source of Mozi malware distribution. The attribution is low confidence, but admins are advised to check their logs for contact with the address. Mozi is a botnet malware that primarily targets IoT devices such as routers and DVRs, often recruiting them for further attacks.

Why now: Security teams are sharing threat intelligence so network administrators can block or investigate the flagged IP.

China UnicomMozi botnet125.41.211.84

Open on mastodon →

Evidence

API: https://socialmediatrends-api.osmike.com/v1/trends/1264921