Skip to content
CybercrimeFinancialStrategic sophistication

RondoDox botnet

RondoDox botnet is a cybercrime syndicate with a financial motive, tracked by Brandefense. It uses 6 MITRE ATT&CK techniques.

Techniques
6
Exploited CVEs
No CVE data
Record updated

About RondoDox botnet.

A Linux-based botnet, first identified in mid-2025, previously known for DDoS attacks and cryptocurrency mining operations. It has expanded its capabilities to rapidly adopt and exploit high-profile RCE vulnerabilities like CVE- for large-scale automated attacks.

Last updated Jul 23, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.