Skip to main content
Mallory
MalwareUsed by 1 actorExploits 1 CVE

ShadowRay

ShadowRay 2.0 is a malware campaign and self-propagating cryptomining botnet targeting internet-exposed Ray clusters. It exploits CVE-2023-48022, a critical missing-authentication/remote code execution issue in the Ray framework, by abusing exposed Ray dashboards and the unauthenticated Job Submission API (/api/jobs/) to execute reconnaissance commands and multi-stage Bash and Python payloads. Oligo Security reported the activity as an evolution of earlier ShadowRay exploitation observed between September 2023 and March 2024, with the newer campaign active since at least September 2024.

The malware is designed to hijack AI compute infrastructure, especially clusters with NVIDIA GPUs, and uses Ray orchestration features to spread across all nodes in a cluster and to other exposed Ray environments, effectively behaving like a worm. Payload delivery infrastructure was observed on GitLab and later GitHub after takedowns. Reported operator naming includes IronErn440. Oligo assessed the payloads were likely generated with assistance from large language models based on code structure, comments, and error-handling patterns.

Observed capabilities include deployment of XMRig for Monero mining, CPU throttling to about 60% to reduce detection, process masquerading as legitimate Linux kernel worker services or names such as "dns-filter," termination of competing miners, blocking of rival mining pools via /etc/hosts and iptables, persistence via cron jobs running every 15 minutes and, in some reporting, systemd modifications, and establishment of Python reverse shells for remote control. The malware also uses Ray scheduling/orchestration features, including lateral movement to non-internet-facing nodes. Region-specific behavior was observed for victims in China.

Beyond cryptomining, compromised Ray clusters were reported as being used for DDoS activity via Sockstress, a TCP state exhaustion tool, and for access to sensitive assets present on clusters, including source code, AI models and datasets, cloud credentials, database credentials, and retained production data. The campaign has been described as global in scope, with reporting citing more than 230,000 publicly accessible Ray servers and attacks against over 200,000 exposed Ray servers worldwide.

High-confidence indicators and artifacts mentioned in reporting include exploitation of CVE-2023-48022; abuse of the Ray Dashboard port 8265 and /api/jobs/ endpoint; use of XMRig and Sockstress; cron-based reinfection/update checks every 15 minutes; reverse shells; and attacker-controlled GitLab/GitHub infrastructure including repository account names such as "ironern440-group" and "thisisforwork440-ops."

Share:
For your environment

Hunt this family in your stack

Mallory pivots from this family to the IOCs, detections, and named campaigns that touch your stack, and pages you when something new lands.

EXPLOITED CVES

Vulnerabilities exploited

1 CVE Mallory has correlated with this family across public research and vendor advisories. Each row links to the full Mallory page for that vulnerability.

1 CVES
CVE-2023-48022Unauthenticated RCE in Anyscale Ray Job Submission API

A global campaign dubbed ShadowRay 2.0 hijacks exposed Ray Clusters by exploiting an old code execution flaw to turn them into a self-propagating cryptomining botnet.

via bleeping computerbleepingcomputer.com
THREAT ACTORS

Groups observed using it

1 distinct threat actor attributed by public researchers. Open in Mallory to see the full evidence chain and overlapping campaigns.

View more details
IronErn440

A global campaign dubbed ShadowRay 2.0 hijacks exposed Ray Clusters by exploiting an old code execution flaw to turn them into a self-propagating cryptomining botnet.

via bleeping computerbleepingcomputer.com
MITRE ATT&CK

Techniques & procedures

1 distinct technique documented for this family, organized by ATT&CK tactic.

Impact

1 technique
T1498Network Denial of ServiceEvidence1
TacticImpact

AI-Generated Malware Attacks 230,000 Exposed Ray AI Clusters in Massive ShadowRay 2.0 Botnet Campaign ... Ddos

What this page doesn’t show

The version that knows your environment.

This page is what’s public. Mallory adds the parts that aren’t: which of your assets match these IOCs, which detections are missing, which campaigns to expect next, and what to do in the next 30 minutes.
IOC matching

Match every observed IP, domain, and hash against your live telemetry.

Threat actor attribution1

Named campaigns wielding this family, with evidence pinned to each claim.

Exploited vulnerabilities1

CVEs this family uses for access and lateral movement.

Detection signatures

YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.

MITRE ATT&CK mapping1

Every documented technique, ranked by evidence weight.

Researcher chatter

Reddit, Mastodon, and CTI community discussion around this family.