The gift that keeps on giving: A new opportunistic Log4j campaign

This report documents an opportunistic campaign exploiting Log4Shell (CVE-2021-44228) to deliver a malicious Java class that downloads and runs an obfuscated bash payload (lte), which installs an XMRig crypto-miner, sets persistence via systemd or cron, deploys multiple encrypted/backdoor shells, performs system reconnaissance and exfiltrates data; the write-up includes decompiled Java code, script behaviour, IPs/domains, file hashes, and Datadog detection guidance.