Security firm CloudSEK has uncovered a botnet campaign that is exploiting the React2Shell vulnerability in the Meta-developed ...

RondoDox botnet exploited React2Shell to compromise IoT devices and Next.js servers over a nine-month global campaign.

RondoDox botnet exploits the React2Shell vulnerability in Next.js, with over 90,000 exposed systems used to deploy miners and ...

December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js ...

The attack tops the 22 Tbps assault from September. Cloudflare also estimates that the Aisuru botnet has grown to span 1 to 4 million infected devices globally.

Kimwolf is the latest reminder that the most dangerous botnets now grow quietly inside everyday consumer electronics.

The security company Synthient currently sees more than 2 million infected Kimwolf devices distributed globally but with ...

Consisting of over 1.8 million infected devices, the Kimwolf Android Botnet focuses on traffic proxying, but can also launch ...

The first ThreatsDay Bulletin of 2026 tracks GhostAd adware, macOS malware, proxy botnets, cloud exploits, and more emerging ...

You’d think a nefarious slice of software designed to frustrate a practice plenty of us dislike — web ads — might engender cheers and well wishes. But no, the ZeroAccess botnet is hardly so noble: a ...