Lazarus React2Shell exploitation to deploy COPPERHEDGE (in H1 2026 Malware Vulnerability Trends)

Date (as written): (no date on page)
Year: undated
Actors (as written): Lazarus
Actor pages: Lazarus
Tags (as written): financial and blockchain-related organizations

Source entries (2)

Recorded Future Insikt Group

Lazarus React2Shell exploitation to deploy COPPERHEDGE (in H1 2026 Malware Vulnerability Trends) · (no date on page)

Lazarus used Command and Scripting Interpreter to execute commands after exploiting React2Shell to deploy COPPERHEDGE against financial and blockchain-related organizations.

https://www.recordedfuture.com/research/h1-2026-malware-vulnerability-trends

Recorded Future Insikt Group

Lazarus Group exploitation of CVE-2025-55182 to deploy COPPERHEDGE (in June 2026 CVE Landscape) · (no date on page)

Lazarus Group exploited CVE-2025-55182 to deploy COPPERHEDGE against financial and blockchain-related organizations.

https://www.recordedfuture.com/blog/june-2026-cve-landscape

Suggest a correction on GitHub