Frequency
1
occurrences
First Seen
November 20, 2025
Last Seen
November 20, 2025
Related Threat Clusters
-
ShadowRay 2.0 Campaign Exploits Ray Clusters for Crypto Mining
A global campaign named ShadowRay 2.0 is targeting exposed Ray clusters, exploiting the unpatched CVE-2023-48022 vulnerability. The attacks, attributed to a threat actor known as IronErn440, have been active since at…
8 articles · Updated November 18, 2025 -
ShadowRay 2.0 Campaign Targets Vulnerable Ray Clusters for Cryptomining
The ShadowRay 2.0 campaign exploits a critical vulnerability (CVE-2023-48022) in the Ray open-source framework, allowing attackers to hijack exposed Ray clusters for cryptomining, data theft, and DDoS attacks. Oligo…
6 articles · Updated November 20, 2025
Recent Intelligence Reports
- Internet-exposed Ray clusters targeted by self-replicating botnet — Scworld · November 20, 2025