The botnet uses exploits targeting the Log4J vulnerability to infect new hosts, a very appealing attack vector seeing that dozens of vendors use the vulnerable Apache Log4j logging library.

The FTC Wants Companies to Find Log4j Fast. It Won't Be Easy The critical vulnerability is buried among endless open source code, and many cyber experts are stumped.