Loading threat actor…
IronErn440 is a threat actor associated with ShadowRay 2.0, a long-running campaign targeting internet-exposed Ray clusters by exploiting CVE-2023-48022. The actor has been linked to a self-propagating cryptojacking botnet that abuses Ray’s unauthenticated job submission and orchestration features to execute payloads across cluster nodes, including large GPU-rich environments. Activity attributed to IronErn440 has been observed since at least September 2024 and has targeted organizations globally. The actor’s operations center on compromising exposed Ray infrastructure for cryptocurrency mining, while also enabling broader post-compromise activity. Reported capabilities include automated target discovery via callbacks, reconnaissance, lateral movement from internet-facing nodes into internal systems, credential theft, data exfiltration, persistence through scheduled tasks and service modifications, and use of compromised systems for distributed denial-of-service attacks. Intrusions have reportedly exposed proprietary AI models, datasets, source code, cloud credentials, database credentials, and retained production user data. IronErn440 has used multi-stage Bash and Python payloads, reverse-shell access for interactive control, and automation that supports resilience and rapid recovery after infrastructure takedowns. The malware has been described as region-aware and capable of propagating autonomously across Ray clusters by leveraging native scheduling mechanisms. The operation has also been tied to tooling and infrastructure overlaps with activity tracked as TA-NATALSTATUS and later TeamPCP, indicating continuity within a broader operational ecosystem rather than an isolated campaign. Reporting has linked IronErn440 specifically to ShadowRay 2.0, while noting uncertainty over whether the relationship to TeamPCP reflects a direct rebrand, shared operators, or close collaboration. The actor’s observed behavior indicates a primarily financially motivated operation focused on monetizing compromised compute resources and stealing valuable data and credentials from AI and cloud environments.
Mallory correlates actor tradecraft and target patterns against your stack, your sector, and your geography. See overlap before they land.
Who, where, and (when attributed) which flag flies behind the operation. Pulled from open-source reporting and Mallory's analyst review.
Sectors the actor has been observed targeting.
14 distinct techniques observed across reporting, grouped by tactic. Hover any cell for the evidence excerpt; click through for MITRE's full description.
4 malware families attributed to this actor across reporting.
2 CVEs this actor has used in observed campaigns. 2 of them exploited in the wild.
Oligo researchers found that an old critical vulnerability tracked as CVE-2023-48022 was exploited in both campaigns... The attacks leverage CVE-2023-48022 to submit jobs to Ray’s unauthenticated Jobs API to run multi-stage Bash and Python payloads...
That progression ran through PCPcat, which peaked around Christmas 2025 against React2Shell targets and exposed Docker APIs.
1 indicator attributed to this actor: domains, IPs, hashes, and other artifacts pulled from reporting. View more in app.
5 sources tracked across advisories, community write-ups, and news. New activity surfaces here as Mallory finds it.
Actor previously attributed with ShadowRay 2.0 activity against exposed Ray clusters and now assessed as linked to TeamPCP through shared infrastructure and GitLab authentication overlap.
IronErn440 is conducting a large-scale campaign (ShadowRay 2.0) exploiting a remote code execution vulnerability in the Ray framework to hijack AI compute infrastructure worldwide. They use compromised clusters for cryptomining, data theft, botnet expansion, and further intrusions, targeting AI startups, research labs, and cloud-hosted environments.
Threat operation targeting organizations with large Ray clusters/GPU environments; uses callback-based discovery and unauthenticated Ray job submission APIs to enable cryptomining, lateral movement, broader host compromise, data theft, and DDoS staging.
Active campaign compromising internet-facing Ray clusters to build a self-propagating botnet for cryptomining, data theft, lateral movement/pivoting to internal nodes, and launching DDoS attacks; uses Ray job submission/scheduling features to execute payloads across cluster nodes and maintains malware delivery/update infrastructure via GitLab/GitHub repos and AWS-hosted C2 reverse shells.
Match sector + geo + tech-stack targeting against your real footprint.
Every observed MITRE ATT&CK technique, grouped by tactic.
Families this actor is known to deploy, with IOCs and behavior.
CVEs this actor has used in known campaigns.
YARA, Sigma, Snort, and vendor rules, auto-deployed to your SIEM.
Domains, IPs, and hashes tied to this actor, refreshed continuously.