Spring4Shell Exploited to Deploy Mirai Botnet Malware

Attackers exploited the Spring4Shell remote code execution flaw, tracked as CVE-2022-22965, to gain code execution on vulnerable Spring Framework applications and deploy Mirai botnet malware. Reporting from Trend Micro showed the vulnerability being weaponized shortly after disclosure, with exploitation attempts targeting exposed Java applications that met the conditions for the flaw.

The observed activity linked a high-profile enterprise software vulnerability to commodity botnet operations, demonstrating how internet-facing servers can be rapidly folded into malware infrastructure after public disclosure. In the documented attacks, successful exploitation led to execution of Mirai-related payloads on compromised systems, underscoring the risk of unpatched Spring deployments being used for botnet propagation and follow-on malicious activity.