Muhstik, a botnet infamous for propagating via web application exploits, has been observed targeting Redis servers using a recently disclosed vulnerability in the database system. The vulnerability relates toCVE-2022-0543, aLua sandbox escape flawin the open-source, in-memory, key-value data store that could be abused to achieve remote code execution on the underlying machine. The