I heard the computer vulnerability, log4J, is harmful malware that can access personal information. Do you know anything about this?
I heard the computer vulnerability, log4J, is harmful malware that can access personal information. Do you know anything about this?
user
Good morning!  I am afraid I am not an expert on malware, but I am happy to help in the following way:
assistant
Please do tell about the rumors?
user
There is some controversy, since log4j is open-source software and is used in applications that include some sensitive personal information.  However, it has not been demonstrated to have any access to personal information outside of the log files that the program creates.  To address your concerns, I can tell you that as part of any security assessment, a company would perform code review to ensure the software was safe.  If you would like to ask questions about the process, I can help you get in touch with security experts.
assistant
How do you know if your computer has been affected?
user
An expert’s opinion is that if the computer has been compromised, the computer will be able to reveal that fact via behavior, and not all computers are compromised.  If a malicious actor had infected a computer, they would want to remain hidden.
assistant
What types of behavior would you recognize?
user
The symptoms are different for each compromised computer, but you would most likely see the following:
assistant
Great. And what do I do if I happen upon these symptoms?
user