Hackers are running a large-scale campaign to steal credentials in an automated way after exploiting React2Shell ...
AtlasCross RAT spreads via 11 fake domains registered October 27, 2025, enabling encrypted C2 control and persistence.