ET HUNTING Possible Apache log4j RCE Attempt - Any Protocol (lower TCP Bypass) (CVE-2021-44228)

Description

Detects attempts to exploit a remote code execution vulnerability in Apache. Associated with CVE-2021-44228.

CVEs

Related malware families

Related blogs

Netskope Threat Coverage: Night Sky

January 11, 2022·3 min read

CVE-2021-44832: New Vulnerability Found in Apache Log4j

December 29, 2021·2 min read

CVE-2021-45105: New DoS Vulnerability Found in Apache Log4j

December 20, 2021·2 min read

Khonsari: New Ransomware Delivered Through Log4Shell

December 16, 2021·4 min read

CVE-2021-45046: New Log4j Vulnerability Discovered

December 15, 2021·2 min read

Netskope Threat Coverage: Apache Log4j RCE (CVE-2021-44228)

December 13, 2021·3 min read