SmuxProxy Generates a Random Encryption Key and IV

Daniel Jeremiah@daniyyell

•updated Jun 20, 2026•0•0•4

Detects an iox-derived proxy process generating a key and initialisation vector while configuring hard-coded forwarding settings. This behavior is indicative of the SmuxProxy malware, which is known to use these techniques for encrypted communication and data forwarding.