React2Shell Flaw Abused as PeerBlight Malware Turns Linux Hosts into Covert Proxy Nodes
The malware first connects to a hardcoded C2 at 185.247.224[.]41:8443, negotiates AES‑256 session keys via RSA‑encrypted handshakes, and then ...
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
