‼️ A threat actor is allegedly selling a React2Shell exploitation toolkit on a popular cybercrime...

Summary

A threat actor known as 'unico' is offering a React2Shell exploitation toolkit for sale on a popular cybercrime forum. The toolkit is marketed as enabling mass scanning, exploitation, and database extraction from vulnerable React-based servers. This represents an accessible attack surface for threat actors targeting web applications built with React.

Indicators of Compromise

• malware — React2Shell

Entities