GoBruteforcer botnet fueled by server deployments with weak credentials and legacy web is targeting cryptocurrency and ...

Researchers detailed a souped-up version of the GoBruteforcer botnet that preys on servers with weak credentials and ...

December 2025, the RondoDox botnet operators have been targeting Next.js servers impacted by the React2Shell vulnerability.

The RondoDox botnet has been observed exploiting the critical React2Shell flaw (CVE-2025-55182) to infect vulnerable Next.js servers with malware and cryptominers.