The malware has added exploits for more web applications and devices to its arsenal and some of them seem to be inherited from an older botnet called Mozi.