---
id: 6317
title: "Coin Miner and Mozi Botnet"
source_domain: hunt.io
source_url: "https://hunt.io/blog/coin-mainer-and-mozi-botnet"
published_at: "2024-03-28T00:00:00Z"
tags: ["malware", "android", "apk", "open-directories", "coin-miner", "mozi-botnet"]
phying_url: "https://phying.com/item/6317"
lang: en
---

# Coin Miner and Mozi Botnet

## Summary

Hunt examined an open directory on a Chinese web server holding 53 suspicious files — coin miners, a tampered TiviMate APK with risky Android permissions, and .m3u files targeting mobile devices.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-03-28T00:00:00Z
- **Original:** https://hunt.io/blog/coin-mainer-and-mozi-botnet
- **Phying News:** https://phying.com/item/6317