ZnDoor Malware Exploiting React2Shell Vulnerability to Compromise Network Devices

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ZnDoor Malware Targets React2Shell Vulnerability in Japanese Networks In December 2025, Japanese organizations are facing attacks exploiting the React2Shell vulnerability (CVE-2025-55182) in React/.js applications. Initially used for cryptocurrency mining, the ZnDoor malware has evolved to compromise network infrastructure. Security researchers are actively investigating these sophisticated threats. 3 sources 36