Tag: RondoDox Botnet

Security researchers have identified an active campaign in which the RondoDox botnet is exploiting the React2Shell vulnerability to compromise internet-facing Next.js servers. The attacks allow remote code execution without authentication, enabling threat actors to deploy malware at scale. The activity highlights how quickly newly disclosed application flaws can be weaponized by automated botnets. What Is…