Indicators are what attackers leave behind. Stolen credentials are what they arrive with.
1 IOC
PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182
Excerpt
Huntress is seeing threat actors exploit React2Shell (CVE-2025-55182) to deploy a Linux backdoor, a reverse proxy tunnel, and a Go-based post-exploitation implant.
Read the original report →Indicators of Compromise
Open the mindmap →1 indicators
| Type | Indicator | Confidence | Score | First Seen |
|---|---|---|---|---|
| CVE | CVE-2025-55182 | High | Score 82/100 | First seen |
IOC Relationship Graph
Building graph…