Log4j is patched, but the exploits are just getting started