A sophisticated campaign in which threat actors are stealthily compromising NGINX servers to redirect web traffic to malicious destinations. The attackers, previously linked to “React2Shell” exploits, are now targeting NGINX configurations, specifically those using the Baota (BT) management panel, widely used in Asia. How the Attack Works Instead of installing traditional malware, these attackers modify […] The post Threat Actors Hacking NGINX Servers to Redirect Web Traffic to Malicious Servers appeared first on Cyber Security News.