Tag: web application

1 Attack Reports | 0 Vulnerabilities

Attack reports

RondoDoX Botnet Weaponizes React2Shell

A persistent nine-month RondoDoX botnet campaign has been targeting IoT devices and web applications. The threat actors have recently shifted to weaponizing a critical Next.js vulnerability, deploying malicious payloads like 'React2Shell' and cryptominers. The campaign, spanning from March to Decem…
iot
botnet
mirai
cryptominer
vulnerability exploitation
command and control
next.js
rondodox
react2shell
2025-12-29
rondo
web application
Published: December 29, 2025
Downloadable IOCs: 7
Click here to see more Attack Reports