Tag: NTT Security

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors
News

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

According to research from Palo Alto Networks Unit 42 and NTT Security, threat actors are using the security flaw known as React2Shell to spread malware families including KSwapDoor and ZnDoor. According to a statement from Justin Moore, senior manager of threat intelligence research at Palo Alto Networks Unit 42, KSwapDoor is a professionally constructed remote access solution created with stealth in mind. By creating an internal mesh network, it enables hacked systems to communicate with one another and get beyond security measures. Most worryingly, it has a "sleeper" mode that allows attackers to get around firewalls by awakening the virus with a covert, undetectable signal. It also employs military-grade encryption to conceal its connections. The Linux backdoor has interactiv...