Intel Node
Automated Credential Harvesting Campaign Exploits React2Shell Flaw
low•advisory•2026-04-06T15:31:09+00:00
An emerging threat cluster tracked as UAT-10608 is exploiting vulnerable Web-exposed Next.js apps and using an automated tool to exfiltrate credentials, secrets, and other system data.