Attackers Exploiting React2Shell Vulnerability to Attack IT Sectors

**Critical React2Shell (CVE-2025-55182) exploit campaigns are actively targeting organizations in insurance, e‑commerce, and IT sectors, delivering miners (XMRig), multiple botnets (Kaiji, RustoBot), backdoors and RATs (EtherRAT, CrossC2).** The vulnerability allows insecure deserialization in React Server Components, enabling rapid weaponization; mitigation requires patching vulnerable packages, rebuilding deployments, and hunting for indicators of successful exploitation and post‑compromise persistence.