Feb 52026 Malicious NGINX Configurations Enable Large-Scale Web Traffic Hijacking Campaign Active React2Shell exploitation uses malicious NGINX configurations to hijack web traffic, targeting Baota panels, Asian TLDs, and government domains.