North Korean Hackers Breached Crypto Cloud Systems Using Front-End Exploit, New ...

Back Mexc

North Korean Hackers Breached Crypto Cloud Systems Using Front-End Exploit, New ...

Mexc • March 9, 2026

Share: View original

Key Takeaways North Korean hackers exploited a React front-end vulnerability (CVE-2025-55182) to breach crypto firms' cloud infrastructure AWS ...

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

North Korean Hackers Exploit React2Shell Vulnerability in Crypto Sector A group of hackers suspected to be linked to North Korea has targeted cryptocurrency firms, exploiting the React2Shell vulnerability (CVE-2025-55182). The attackers compromised AWS access credentials to infiltrate cloud environments and extract sensitive data from various resources, including S3 and EC2 instances. 8 sources 72

Extracted Entities

Attack Types (1)

Companies (1)

CVEs (1)

MITRE ATT&CK (1)

T1190 - Exploit Public-Facing Application