ThreatLabz analysis - Log4Shell CVE-2021-44228 Exploit Attempts

Zscaler ThreatLabz describes active exploitation of the Apache Log4j (CVE-2021-44228) 'Log4Shell' vulnerability, documenting how attackers deliver secondary payloads (Mirai botnet, Kinsing coinminer/rootkit, Monero miners), perform credential theft and persistence, and use various protocols (LDAP, RMI, DNS, HTTP) to fetch malicious components; the report includes payload examples, behavioral analysis, and extensive IOCs (hashes, IPs, domains, download URLs) to support detection and mitigation.