Ukraine's State Data-Exchange System Targeted by Russian-Speaking Operator via Graylog Log4Shell

Reported 20 Oct 2026 by otx · Severity: medium

Between May and September 2026, a Russian-speaking operator systematically targeted Ukraine's state data-exchange infrastructure by exploiting Log4Shell vulnerabilities in Graylog servers. The attacker swept 9.1 million Ukrainian IP addresses, filtering 7,576 live hosts to identi