Dec 102025 North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware North Korea-linked attackers exploit CVE-2025–55182 to deploy EtherRAT, a smart-contract-based RAT with multi-stage persistence.