Security News North Korean hackers exploit React2Shell flaw in EtherRAT malware attacks BleepingComputer Daniel Bender 09 Dec 2025 A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence mechanisms and leverages Ethereum smart contracts for communication with the attacker.
