Threat Alert: Tracking Real-World Apache Log4j Attacks

This report documents real-world exploitation of the critical Log4j (CVE-2021-44228) vulnerability observed by Aqua Security via honeypots: multiple botnets and attackers exploited JNDI lookups to deliver malware (Muhstik, Mirai), open reverse shells, and execute payloads directly in memory to evade detection; the report includes IoCs (IPs, MD5 hashes, sample payloads) and recommends detection via a Java Trace-Agent hooking the JNDI lookup.