RondoDox Botnet: How 90,000+ Servers Were Hijacked Silently
90,000+ servers compromised. No ransomware. No alerts. RondoDox exploited the Next.js React2Shell flaw to silently recruit unpatched apps into a botnet—deploying cryptominers and DDoS payloads. This is how modern botnets grow, and why app-layer bot protection matters.