Nation-State Hackers Exploit React2Shell Vulnerability

First seen 15 Dec 2025, 22:50 UTC • Govinfosecurity

•38

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Hackers linked to North Korea and China are exploiting the React2Shell vulnerability (CVE-2025-55182). Cloud security firm Sysdig reported on December 8, 2025, that these nation-state actors are actively using tools associated with their operations to carry out these exploits.

How this analysis works

Continue Reading

Critical React2Shell RCE Vulnerability Exploited in the Wild RondoDox Botnet Targets React2Shell Flaw to Spread Malware Critical NGINX UI Vulnerability CVE-2026-33032 Under Active Exploitation AWS Warns of Data Exfiltration Risks from Outbound Traffic Blind Spots ChocoPoC Malware Targets Cybersecurity Researchers via Trojanized GitHub Exploits Rapid Exploitation of Vulnerabilities in 2025: Insights from Cisco Talos

Nation-State Hackers Exploit React2Shell Vulnerability

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading