Microsoft: Hackers in China, Iran and elsewhere start exploiting widespread Apache Log4j flaws

Todd Bishop 2021-12-15 13:34:07 www.geekwire.com Microsoft says groups connected to governments in China, Iran, North Korea and Turkey have begun exploiting vulnerabilities in the Apache Software Foundation's widely used open-source Log4j software library. Hackers can use the software flaws to gain control of compromised computers and systems. Microsoft has detected initial activity by government-affiliated groups ranging from experimentation to active exploitation of the vulnerabilities, the company said Tuesday in an updated post about the issue. Others are using flaws to gain initial access for ransomware attacks. "These access brokers then sell access to these networks to ransomware-as-a-service affiliates," Microsoft said….