The operators behind the highly adaptable RondoDox botnet campaign that kicked off in late March have proven to be ready to embrace the latest attack trends. Most recently, in December they began targeting Next.js servers that are vulnerable to the maximum-severity React2Shell flaw, which was disclosed December 3.

The post RondoDox Botnet Operators Set React2Shell Flaw in Their Sights appeared first on Security Boulevard.

Jeffrey Burt

Source: Security Boulevard
Source Link: https://securityboulevard.com/2026/01/rondodox-botnet-operators-set-react2shell-flaw-in-their-sights/