ShadowRay 2.0 Turns AI Clusters into Crypto Botnets

Oligo Security describes an active global campaign called ShadowRay 2.0 in which threat actors (IronErn440) exploit a disputed critical RCE in the Ray framework (Jobs API / exposed dashboards) to take over AI clusters, deploy cryptominers (XMRig, Rigel), exfiltrate credentials and AI models, and autonomously propagate across exposed Ray environments via GitLab/GitHub-hosted, AI-generated payloads; the report warns of widespread exposure (≈230,000 Ray instances) and recommends proper configuration and authorization layers.