North Korean hackers exploit React2Shell flaw in EtherRAT malware attacks

North Korean hackers are deploying EtherRAT malware through React2Shell vulnerability exploitation. The malware implements five separate Linux persistence mechanisms and uses Ethereum smart contracts for command and control communication. This represents a sophisticated attack methodology combining blockchain technology with traditional malware persistence techniques. The campaign demonstrates advanced capabilities in maintaining long-term access to compromised systems while leveraging decentralized communication channels.