Signalis
sign in--:--:--UTC
CVEs

CVE-2021-44228

exploited in the wild
CVSS
10.0
Reports
9
First seen
Dec 10
Last seen
May 28
Affected product

Apache Log4j 2.0-beta9 through 2.15.0

Associated actors

Bling Libra ×1CL-CRI-1116 ×1Hazy Scorpius ×1LAPSUS$ Group ×1Rostova Organization ×1Scattered LAPSUS$ Hunters ×1TGR-CRI-1135 ×1

Recent reports

High

Out of the Crypt: The Evolving Cyber Extortion Economy

Palo Alto Unit 42High

Log4Shell exploitation against VMware Horizon detected and remediated

Huntress BlogCritical

VMware Horizon servers actively being hit with Cobalt Strike via Log4Shell

Huntress BlogCritical

High Threat Security Alert: Vulnerabilities in Apache Log4j (CVE-2021-45105, CVE-2021-44228)

GovCERT.HKCritical

Apache Log4j CVE-2021-45046: Incomplete Patch Leaves Remote Code Execution Vulnerability

NICS TaiwanCritical

Log4Shell: A Tradecraft Tuesday Recap

Huntress BlogCritical

Vulnerability in Apache Log4j (CVE-2021-44228, CVE-2021-45046)

GovCERT.HKCritical

Critical RCE Vulnerability in log4j (CVE-2021-44228)

Huntress BlogCritical

Critical RCE Vulnerability: log4j CVE-2021-44228

Huntress Blog

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans