Iranian government hackers gain initial access to SysAid apps 

The Log4Shell vulnerability, which affects the Apache Log4j logging utility, was discovered in December 2021.

The flaw can be used to execute remote code and has been used by both profit-driven cybercriminals and state-sponsored cyberspies. Mercury, also known as Seedworm,

Static Kitten, and MuddyWater, is being tracked by Microsoft and has been linked to Iran’s intelligence services.

An Iranian government-linked threat group appears to be the first to exploit the Log4Shell vulnerability in SysAid applications. Mercury, also known as Seedworm, Static Kitten, and MuddyWater, was officially linked to Iran’s Ministry of Intelligence and Security earlier this year by the US government.

Mercury targeted organisations in Israel in the attacks observed by Microsoft in late July.