ZnDoor Malware Exploiting React2Shell Vulnerability to Compromise Network Devices

Cybersecuritynews •Tushar Subhra Dutta • December 15, 2025

Since December 2025, a concerning trend has emerged across Japanese organizations as attackers exploit a critical vulnerability in React/ .js applications. The vulnerability, tracked as CVE-2025-55182 and known as React2Shell, represents a remote code execution flaw attracting widespread exploitation. While initial attacks primarily deployed cryptocurrency miners, security researchers uncovered more sophisticated threats targeting network infrastructure through […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

ZnDoor Malware Targets React2Shell Vulnerability in Japanese Networks In December 2025, Japanese organizations are facing attacks exploiting the React2Shell vulnerability (CVE-2025-55182) in React/.js applications. Initially used for cryptocurrency mining, the ZnDoor malware has evolved to compromise network infrastructure. Security researchers are actively investigating these sophisticated threats. 3 sources 36

Extracted Entities

ZnDoor Malware Exploiting React2Shell Vulnerability to Compromise Network Devices

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

Malware (2)

Platforms (1)