{"id":48185,"date":"2022-08-26T12:29:00","date_gmt":"2022-08-26T12:29:00","guid":{"rendered":"http:\/\/e1758cbb-4be2-4242-a564-af5a4008d92e"},"modified":"2022-08-26T12:29:00","modified_gmt":"2022-08-26T12:29:00","slug":"microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/","title":{"rendered":"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel"},"content":{"rendered":"<figure class=\"c-shortcodeImage u-clearfix c-shortcodeImage-large\">\n<div class=\"c-shortcodeImage_imageContainer\">\n<div class=\"c-shortcodeImage_image\"><picture class=\"c-cmsImage\"><!----> <img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/\" alt=\"getty-hacker-hands-on-a-keyboard.jpg\" height=\"897.3026973026973\" width=\"1200\"><\/picture><\/div>\n<p> <!----> <!----><\/div>\n<p> <!----><figcaption> <span class=\"c-shortcodeImage_credit g-outer-spacing-top-xsmall u-block\">GettyImages<\/span><\/figcaption><\/figure>\n<p>Microsoft has warned that an Iranian state-based threat actor it calls Mercury is using the Log4Shell flaws in applications from IT vendor <a href=\"https:\/\/www.sysaid.com\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">SysAid<\/a> against organizations located in Israel.<\/p>\n<p>Microsoft&#8217;s nation-state tracking team, <a href=\"https:\/\/www.zdnet.com\/article\/microsofts-new-security-tool-lets-you-to-see-your-systems-like-a-hacker-would\/\" rel=\"follow\">Microsoft Threat Intelligence Center (MSTIC)<\/a>, has assessed with &#8220;high confidence&#8221; that the campaign is affiliated with Iran&#8217;s Ministry of Intelligence and Security (MOIS). US Cyber Command <a href=\"https:\/\/www.zdnet.com\/article\/us-cyber-command-links-muddywater-to-iranian-intelligence\/\" rel=\"follow\">tracks the group as MuddyWater<\/a>, which it assesses is a &#8220;subordinate element&#8221; of MOIS.<\/p>\n<p>Targeting SysAid apps is a new approach for Mercury, which in the past has used <a href=\"https:\/\/www.zdnet.com\/article\/log4j-flaw-attackers-are-targeting-log4shell-vulnerabilities-in-vmware-horizon-servers-says-nhs\/\" rel=\"follow\">Log4Shell remote code execution flaws in VMware apps<\/a> to carry out attacks.<\/p>\n<p>SysAid is an IT services management firm founded in Israel. The company rolled out <a href=\"https:\/\/www.sysaid.com\/security-compliance\/important-update-regarding-apache-log4j\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Log4j patches for its cloud and on-premises products<\/a> in January, shortly after the Apache Software Foundation disclosed the bugs in the Log4J Java app logging library on December 9.<\/p>\n<p>&#8220;In recent weeks, the Microsoft Threat Intelligence Center (MSTIC) and Microsoft 365 Defender Research Team detected Iran-based threat actor MERCURY leveraging exploitation of <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2021\/12\/11\/guidance-for-preventing-detecting-and-hunting-for-cve-2021-44228-log4j-2-exploitation\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Log4j 2 vulnerabilities<\/a> in <a href=\"https:\/\/www.sysaid.com\/security-compliance\/important-update-regarding-apache-log4j\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">SysAid<\/a> applications against organizations all located in Israel,&#8221; <a href=\"https:\/\/www.microsoft.com\/security\/blog\/2022\/08\/25\/mercury-leveraging-log4j-2-vulnerabilities-in-unpatched-systems-to-target-israeli-organizations\/\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">Microsoft warned<\/a>.<\/p>\n<p>Microsoft observed the group using what were &#8220;most likely&#8221; Log4Shell exploits between July 23 and 25 against SysAid Server instances exposed to the internet. The campaign is occurring to the backdrop of US, Iran and Israel <a href=\"https:\/\/www.axios.com\/2022\/08\/25\/us-toughened-positions-iran-deal-response-israel\" target=\"_blank\" rel=\"noopener noreferrer nofollow\">negotiating a new nuclear deal<\/a>.<\/p>\n<p>&#8220;After gaining access, MERCURY establishes persistence, dumps credentials, and moves laterally within the targeted organization using both custom and well-known hacking tools, as well as built-in operating system tools for its hands-on-keyboard attack,&#8221; Microsoft explained.<\/p>\n<p>The group is dropping and using web shells to execute commands related to reconnaissance, lateral movement and persistence. It&#8217;s also using the open-source pen-testing tool Mimikatz to dump and steal credentials, as well as dumping credentials in SQL servers to steal high-privilege service accounts.<\/p>\n<p>While the threat appears to be targeted exclusively at organizations based in Israel, Microsoft is urging all organizations to check whether SysAid is present on the network and apply the firm&#8217;s patches for the Log4j flaws.<\/p>\n<p>Previously, US Cyber Command has found <a href=\"https:\/\/www.zdnet.com\/article\/us-cyber-command-links-muddywater-to-iranian-intelligence\/\" rel=\"follow\">MOIS using known vulnerabilities to carry out attacks<\/a>. Throughout 2021, Iranian threat actors were using flaws in Fortinet gear and the Microsoft Exchange Server ProxyShell bugs to gain initial access in targets.&nbsp;<\/p>\n<p>The US Cyber Safety Review Board (CSRB), in <a href=\"https:\/\/www.zdnet.com\/article\/log4j-flaw-why-it-will-still-be-causing-problems-a-decade-from-now\/\" rel=\"follow\">July deemed Log4Shell an &#8220;endemic&#8221; vulnerability<\/a> that it expects to affect systems until at least 2032. Part of Log4Shell&#8217;s problem was that the Log4j component is used in so many different applications, and discovering which of them are affected remains a challenge. The Cybersecurity and Infrastructure Security Agency (CISA) estimated hundreds of millions of internet-facing devices were vulnerable to Log4Shell.<\/p>\n<p>Microsoft recommends that security teams review all authentication activity for remote access infrastructure and focus on accounts configured that have not been protected with multi-factor authentication (MFA). It also recommends that organizations enable MFA.&nbsp;<\/p>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Microsoft warns that a group affiliated with Iranian intelligence is exploiting server software.<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-48185","post","type-post","status-publish","format-standard","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v28.1 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2022-08-26T12:29:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel\",\"datePublished\":\"2022-08-26T12:29:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/\"},\"wordCount\":502,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\\\/\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/\",\"name\":\"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\\\/\",\"datePublished\":\"2022-08-26T12:29:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\\\/\",\"contentUrl\":\"https:\\\/\\\/www.zdnet.com\\\/article\\\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\\\/\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/","og_locale":"en_US","og_type":"article","og_title":"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2022-08-26T12:29:00+00:00","og_image":[{"url":"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/","type":"","width":"","height":""}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel","datePublished":"2022-08-26T12:29:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/"},"wordCount":502,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/","url":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/","name":"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#primaryimage"},"thumbnailUrl":"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/","datePublished":"2022-08-26T12:29:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#primaryimage","url":"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/","contentUrl":"https:\/\/www.zdnet.com\/article\/microsoft-iranian-attackers-using-log4shell-to-attack-organizations-in-israel\/"},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/microsoft-iranian-attackers-are-using-log4shell-to-target-organizations-in-israel\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"Microsoft: Iranian attackers are using Log4Shell to target organizations in Israel"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48185","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=48185"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/48185\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=48185"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=48185"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=48185"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}