Cryptominers, Reverse Shells Dropped in Recent React2Shell Attacks

Back Feeds.Feedburner

Cryptominers, Reverse Shells Dropped in Recent React2Shell Attacks

Feeds.Feedburner •Ionut Arghire • February 4, 2026

Share: View original

Two IP addresses accounted for the majority of the 1.4 million exploitation attempts observed over the past week.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

1.4 Million React2Shell Exploitation Attempts Involve Cryptominers and Reverse Shells Over the past week, there have been 1.4 million exploitation attempts related to React2Shell, primarily deploying cryptominers and reverse shells. Two specific IP addresses were responsible for the majority of these attempts, indicating a concentrated effort in exploiting this vulnerability. 3 sources 26

Extracted Entities

Attack Types (1)

Campaigns (1)

React2Shell Attacks

Malware (1)