Log4j RCE 0-day Vulnerability in Java Actively Exploited

Cyble Research Labs details active exploitation of the critical Log4j (CVE-2021-44228) vulnerability: attackers are using JNDI/LDAP payloads (often base64-encoded and obfuscated) to trigger remote code execution, hosting stagers across multiple countries and providers, and leveraging the flaw to distribute malware and ransomware families; the report includes PoC validation, extensive IoCs (IP addresses, payload patterns, hosting providers), impact analysis (including Apple backend observations), and mitigation guidance such as upgrading Log4j and temporary WAF rules.