Cryptominers and Reverse Shells Widely Deployed in Ongoing React2Shell Exploitation

• BY Rishabh Singh Chauhan
• February 4, 2026
• 0 Comments

What’s Happening Once exploited, attackers frequently deploy the XMRig cryptocurrency miner and establish reverse shells — giving hands-on access to compromised systems. Over 1.4 million exploitation attempts targeting React2Shell were observed in the past week by GreyNoise threat intelligence. Two malicious IP addresses alone accounted for the majority of these attempts, with nearly 35% tied […]