vmware horizon hackers servers exploit by

“Since December 2021, multiple threat actor groups have exploited Log4Shell on unpatched, public-facing VMware Horizon and UAG servers. The bad actors also include state-sponsored advanced persistent threat (APT) actors. In a new joint cybersecurity advisory, the Cybersecurity and Infrastructure Security Agency (CISA) and the United States Coast Guard Cyber Command (CGCYBER) warned cyber threat actors continue to exploit CVE-2021-44228 in unpatched VMware Horizon and Unified Access Gateway (UAG) servers. This past April, researchers discovered millions of Java applications were still vulnerable in the wild to Log4Shell. Researchers and technology vendors soon followed with new reports of multiple exploits against Log4Shell, such as cyberattacks from Aquatic Panda and Deep Panda.

The severe flaw affected many consumer and enterprise services, websites, applications, and other products Last December, researchers had discovered the Critical Log4Shell vulnerability (CVE-2021-44228) in Apache Log4j logging utility that can result in remote code execution (RCE) by logging a certain string. Updated July 20, 2022: This post has been updated to include new indicators of compromise (IoC) as provided in CISA malware analysis report on July 18. Cybersecurity experts warn cyber actors continue to exploit the Log4Shell vulnerability in VMware Horizon Systems.

Vmware horizon hackers servers exploit by