The attack leverages the Log4Shell flaw to download an additional payload from a remote server that encrypts all the files with the extension ".khonsari" and demands a Bitcoin ransom payment.
Support the originator by clicking the read the rest link below.