Loading malware…
NoodlerRat is a malware family observed in active exploitation campaigns leveraging the React2Shell vulnerability (CVE-2025-55182) in React Server Components. It has been deployed by both nation-state actors (notably Chinese and North Korean government-backed groups) and cybercriminals as part of multi-stage attacks. NoodlerRat is used alongside other malware such as Snowlight, Vshell, XMRIG, BPFDoor, Autocolor, Mirai, and Supershell, indicating its role in a diverse threat ecosystem. The campaigns target a wide range of sectors, including financial services, higher education, technology, government, media, manufacturing, and hospitality, with global victims in the U.S., Asia, South America, and the Middle East. While specific technical details of NoodlerRat's capabilities are not provided in the available content, its deployment in these attacks suggests it is used for post-exploitation activities, potentially including backdoor access, lateral movement, or data exfiltration. Its association with high-profile, state-backed threat actors and opportunistic cybercriminals highlights its significance in current threat activity exploiting CVE-2025-55182.
Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.
3 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Backdoor malware observed in attacks exploiting CVE-2025-55182.
Backdoor malware observed in attacks exploiting CVE-2025-55182.
Unit 42 said it has observed Snowlight, Vshell, NoodlerRat, XMRIG, BPFDoor, Autocolor, Mirai and Supershell malware.
Match every observed IP, domain, and hash against your live telemetry.
Named campaigns wielding this family, with evidence pinned to each claim.
CVEs this family uses for access and lateral movement.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Every documented technique, ranked by evidence weight.
Reddit, Mastodon, and CTI community discussion around this family.