PeerBlight Linux Backdoor Exploits React2Shell CVE-2025-55182
Huntress is seeing threat actors exploit React2Shell (CVE-2025-55182) to deploy a Linux backdoor, a reverse proxy tunnel, and a Go-based post-exploitation implant.
Bringing military precision to cybersecurity threat hunting.
Craig Sweeney decided to transfer his skills from the physical security space into cyber, leveraging his background to combat digital threats. With a Bachelor of Science in Computer Science and the eCTHP (eLearnSecurity Certified Threat Hunting Professional) certification, he specializes in threat hunting, detection engineering, and threat intelligence at Huntress.
Before joining Huntress, Craig served in the United States Marine Corps and later worked as an adjunct instructor teaching threat hunting and security engineering. His diverse experience equips him with a comprehensive understanding of cybersecurity's theoretical and practical aspects.
What he loves most about working at Huntress is the remote working environment and the unique mission to protect the 99%. "It enables us to attract some of the best talent in the world," he says.
What’s your favorite cybersecurity tip, Craig?
For those who work in the cybersecurity space: "Brilliance in the basics. If you master the basics, you're 90% of the way there."
For the general public: "Use MFA on all accounts, and verify who you're talking to for any transaction by using personal questions."
Learn more about Craig over at his LinkedIn page.
Huntress is seeing threat actors exploit React2Shell (CVE-2025-55182) to deploy a Linux backdoor, a reverse proxy tunnel, and a Go-based post-exploitation implant.
A targeted intrusion hit a market research company serving Fortune 50 clients and governments. Huntress suspects nation-state involvement and documents the full attack chain from early 2025.
Reports said the latest Samsung MagicINFO 9 Server version patched CVE-2024-7399. Huntress independently verified it didn't. Here's the rapid response details.
Even non-profits and human rights organizations have adversaries. Huntress investigated an APT campaign targeting Vietnamese human rights defenders. Learn more about the tradecraft and the full attribution.