ShadowRay 2.0: Active Global Campaign Hijacks Ray AI Infrastructure Into Self-Propagating Botnet | Oligo Security

A global, AI-driven hacking campaign dubbed ShadowRay 2.0 is actively exploiting a disputed vulnerability in the Ray AI framework to seize control of exposed clusters, weaponize legitimate orchestration features, and build a self-replicating, multi-purpose botnet that mines cryptocurrency, exfiltrates sensitive data, and launches DDoS attacks—all while evading detection through sophisticated, region-aware, and rapidly evolving techniques.