A new malware implant called EtherRAT, deployed in a recent React2Shell attack, runs five separate Linux persistence ...
It has been seen spreading cryptojacking malware and in attempts to steal cloud credentials from compromised machines.