Malware
PeerBlight
- First Reported
- Dec 10, 2025
- Latest Reported
- Mar 3, 2026
Reported Context (3)
- A Linux endpoint was targeted with a React2Shell exploit, installed the PeerBlight malware, and then attempted to install the XMRig cryptominer, an open-source tool primarily used to mine cryptocurrencies like Monero Huntress Sees Linux Threats Evolving Toward Cross-OS Attacks
- vulnerability across multiple customers, dropping everything from cryptominers and a Linux backdoor (PeerBlight) to tunneling tools, Go-based implants, and even a Kaiji botnet variant. Holiday Security Guide Covers React2Shell, ClickFix, Phishing and Practical Defenses
- PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182 Huntress Details React2Shell Exploitation and Linux Malware
CVE (3)
Malware (10)
People (9)
Threat Actors (5)
MITRE ATT&CK (18)
Vendors (3)
Products (19)
Tools (4)
Industries (5)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.