Red flag for ransomware: attackers are using Log4Shell vulnerability to deliver backdoors to virtual servers, Sophos research shows
Sophos finds three backdoors, possibly delivered by initial access brokers, and four cryptominers targeting unpatched VMware Horizon servers.