BlackBerry researchers found evidence correlating attacks from an initial access broker group with the exploitation of the Log4J vulnerability in VMware Horizon.
Article Link: Log4J: BlackBerry finds Prophet Spider access broker exploiting VMware Horizon | ZDNet