Investigating a Log4j Malware Attack (CVE-2021-44228)

Walking you through my process of investigating a malware intrusion attempt picked up by my Log4j honeypot. Github: github.com/MalwareTech/Log4jT...

[@tylorhillman9186]

Marcus this was fantastic. I’ve followed you for a while now and I’ve aspired to be a pen-tester largely from your story. Thank you for being an inspiration.

[@JesseEmond]

Super interesting, would love to see you reverse engineer the go malware as well! Thanks for the videos as always.

[@mabusugaming]

Did not know you had a yt channel. Great short videos to the point!

[@ponderednamefordays6704]

Super interesting video! I'd love to see you do a breakdown of the NSO zero click imessage exploit. I read the google project zero blog post on it but can't wrap my head around the virtual CPU part.

[@anonymous6666]

thanks so much for sharing marcus!!

[@joevarkey6761]

Thank you so much for this video, could you please show how you would go about reversing the binary.

[@sandwich2473]

your videos are wonderful 😌 I need to find more friends who are interested in this stuff to share them with 😔

[@spiritedaway99]

that was insightful,thank you 💛

[@someyounggamer]

Amazing video !

[@wikinoa]

Great one, Marcus👏

[@tkdhaa]

wonderful video

[@KontrolStyle]

thanks for sharing.

[@setmawnaing3559]

thanks for the video

[@polonia66]

thanks for doing that, can you please add reverse part :D all the best !

[@rakishikng3380]

Amazing man

[@saifuddin1101]

thank you

[@droravrahami6375]

Nice, thank you!

[@sembutininverse]

thank you 🙏🏻

[@berndeckenfels]

“Gelang is the perfect language to make your binary as large as humanly possible” LOL!

[@kosmonautofficial296]

Cool vid thanks

[@sefaaydemir8657]

dropping this comment so that MT can move up in the algorithm

[@Kay_MYG]

kali means bitter or fierce in swahili

[@jamesos2744]

Nice!

[@wavematrix]

I understood none of this cuz I'm dumb but it was pretty cool

[@m.g1490]

can you make a tutorial for hacking please

[@faucon.t]

Anyone else knows who is Denjmnok420? He's someone who's bruteforcing ip adresses and ports to search log4j vulnabilities on Minecraft servers (basically searching every minecraft server in the world to attack them) he tried to attack my server Got his IP His country Lost his MAC address tho, so can't track down his internet chip or whatever it's called (corruption on my server)

[@Ashok-ze8bf]

Can you unban my free fire I'd??? Please sent a reply