Microsoft Security Threat Intelligence Center has recently found that the Mozi P2P botnet is continuously attacking IoT devices. It has installed new functions that help the threat actors to remain resolute in network gateways that have been built by Netgear, Huawei, and ZTE, and Microsoft has already updated the researchers to detect and respond to the attack. The malware puts the script file named S95Baby in the folders /etc/networks or /user/networktmp, it adds up the script to /etc/.networks and /rcS.d. In case of successful exploitation of the vulnerability, it will grant the malware access to the folders that are mentioned below.”]
Source: https://gbhackers.com/mozi-iot-botnet-uses-mirai-variants-to-target-network-gateways/