North Korean Hackers Deploy EtherRAT Malware in React2Shell Exploits

Hackread published a December 2025 report on North Korean hackers deploying EtherRAT malware through React2Shell exploits. The article documents the technical details and threat actors behind the campaign without attribution to Casey Ellis.