Researchers have noted a growing variety of ways attackers are leveraging the Bash bug to commandeer web servers. In just 24 hours, Incapsula recorded 17,400 attacks against its WAF installed base, lashing out at approximately 1,800 domains. The attacks are originating from 400 unique IP addresses, with more than half of them in China or the US. Researchers at FireEye ran down a laundry list of exploitation techniques already seen in Shellshock traffic. An attack against a Chinese financial institution should give security teams pause.”]
Source: https://www.darkreading.com/attacks-breaches/making-sense-of-shellshock-attack-chaos