Log4Shell Analysis through January 2022
ID: 0e8e1a3f-db1e-5b11-a3e5-c4f135c99947
STIX ID: report--0e8e1a3f-db1e-5b11-a3e5-c4f135c99947
Feed Name: Arctic Wolf Blog
Threat Score
Arctic Wolf reviewed Log4Shell (CVE-2021-44228) activity across 2,300+ customers through Jan 25, 2022, identifying 29,338 scanning incidents, 252 successful RCEs impacting 70 customers, and follow-on activity including Cobalt Strike beaconing, Night Sky ransomware (AQUATIC PANDA/DEV-0401) attempts, and XMrig cryptominer deployments; most intrusions were detected and contained through layered defenses and SOC response.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.