New PowerShell Backdoor in Log4j Attack

APT35 (aka Charming Kitten, TA453, or Phosphorus), is an Iranian nation-state actor, started widespread scanning and attempts to leverage Log4j flaw in publicly facing systems. The actor’s attack setup was obviously rushed, as they used the basic open-source tool for the exploitation and based their operations on the previous infrastructure, which made the attack easier to detect and attribute.