Advisoryseverity: High2022-01-11
APT35 weaponizes Log4Shell against unpatched targets
published by Check Point Research
Actor
Iranian state-sponsored actor associated with the IRGC. Conducts long-term espionage and credential-phishing operations against journalists, dissidents, U.S. and Israeli government targets, and acade…
Summary
Check Point Research observed APT35 actively exploiting Log4Shell (CVE-2021-44228) within a week of public disclosure, deploying a modular PowerShell toolkit ('CharmPower') against vulnerable VMware Horizon and similar Java-stack targets.
Tags
log4shellcve-2021-44228powershell