Skip to content

Malware

ShadowV2

According to Fortinet, this is a Mirai fork propagating through multiple vulnerabilities.

ShadowV2 is a Linux malware family.

Background

Fortinet describes this as a fork of Mirai that spreads by exploiting several vulnerabilities. ShadowV2 was earlier seen going after AWS EC2 instances in campaigns made public in September 2025.


Source: Malpedia (Fraunhofer FKIE).