The Anatomy of a React2Shell Compromise - TLPBLACK

A critical React Server vulnerability (React2Shell) enabled rapid, global exploitation—primarily for cryptojacking—by opportunistic, AI-assisted threat actors leveraging mass scanning and improved payloads, with evidence pointing to Chinese-speaking operators and persistent compromise of major cloud-hosted infrastructure.