Credential Harvesting Campaign Exploits React2Shell

NEOSEC enrichment — no mirror of the original source

Researchers at Talos Intelligence have discovered "a large-scale automated credential harvesting campaign carried out by a threat cluster [they] are tracking as UAT-10608." The campaign involves targeting Next.js applications vulnerable to

Source: SANS NewsBites. For licensing reasons NEOSEC Intel does not mirror the full text verbatim. The full text and expert commentary are available at the original source.