Malware
RondoBOT
- First Reported
- Dec 29, 2025
- Latest Reported
- Dec 29, 2025
Reported Context (1)
- long-term stability on compromised hosts. The first variant operates as a loader and health-checker for RondoBOT, terminating competing malware and coin miners before downloading the primary bot binary and RondoDoX Botnet Exploits Next.js Vulnerability in Multi-Month Campaign
Malware (2)
MITRE ATT&CK (6)
Products (11)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.