{"uuid": "b10e3dd1-bc05-4059-88ca-391870556198", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2021-44832", "type": "seen", "source": "https://t.me/hacking_Attack/36753", "content": "nerability identifier (CVE-2021-44832) and that the exploitation of the bug depends on a non-default log4j setup where configuration is being loaded from a remote server: Looks like log4j CVE-2021-44832 has non default preconditions:  \u201cYou are loading configuration from a remote server and/or someone can hijack/modify your log4j configuration file\nYou are using the JDBC log appender with a dynamic URL address.\u201d\n\n\u2014 Marc Rogers (@marcwrogers) December 28, 2021\nSee Also: Offensive Security Tool: log4j Honeypot Flask Up until now, log4j vulnerabilities have been exploited by all kinds of threat actors from state-backed hackers\u00a0to ransomware\u00a0gangs\u00a0and others to inject Monero miners\u00a0on vulnerable systems.\n\nThe Conti ransomware gang has been seen\u00a0 eying vulnerable VMWare vCenter servers. Whereas\u00a0attackers breaching\u00a0the Vietnamese\u00a0crypto platform, ONUS, via log4shell demanded a $5 million ransom. \n\nLog4j users should immediately upgrade to the latest release 2.17.1\u00a0(for Java 8). Backported versions\u00a02.12.4 (Java 7) and 2.3.2 (Java 6) containing the fix are also expected to be released shortly.\n\nBleepingComputer has reached out to Checkmarx for comment in advance of writing and we are awaiting their response.\nSee Also: Hacking stories \u2013 Rafael N\u00fa\u00f1ez (aka RaFa), hacking NASA with the hacking group: World of Hell\nSource: www.bleepingcomputer.com (Click Link)https://www.blackhatethicalhacking.com/wp-content/uploads/2021/11/Untitled-design.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/qnap-logo-white-90x90.jpg QNAP NAS devices hit in surge of ech0raix ransomware attacks1 day ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/shutterstock_495927541-90x90.jpg Wireless coexistence \u2013 New attack technique exploits Bluetooth, WiFi performance features2 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/apple-store-tower-90x90.jpg Apple fixes macOS security flaw behind Gatekeeper bypass5 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/5157-article-201208-ms-team_body_text-90x90.jpg Microsoft Teams bug allowing phishing unpatched since March6 days ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-6-90x90.jpg 800K WordPress sites still impacted by critical SEO plugin flaw1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-5-90x90.jpg Microsoft warns of easy Windows domain takeover via Active Directory bugs1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-4-90x90.jpg TellYouThePass ransomware revived in Linux, Windows Log4j attacks1 week ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/ezgif.com-gif-maker-3-1-90x90.jpg Log4j attackers switch to injecting Monero miners via RMI2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/Hackers-Using-Malicious-IIS-Server-Module-to-Steal-Microsoft-Exchange-560x380-1-90x90.jpg Hackers steal Microsoft Exchange credentials using IIS module2 weeks ago\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2021/12/how-ransomware-works-1024x535-1-90x90.png New ransomware now being deployed in Log4Shell attacks2 weeks ago\nThe post Log4j 2.17.1 out now, fixes new remote code execution bug first appeared on Black Hat Ethical Hacking.\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:02:01.136779Z"}