RondoDox Botnet Launches Attacks Exploiting HPE OneView Vulnerability

First seen 16 Jan 2026, 13:51 UTC • Infosecurity-Magazine

•54

Article Content

Include sub-articles 1 / 1

Browse articles

ThreatCluster

Check Point Research has identified a coordinated exploitation campaign by the RondoDox botnet targeting a critical vulnerability in HPE OneView, designated as CVE-2025-37164. This campaign marks a significant escalation from earlier probing attempts to large-scale automated attacks, affecting organizations using HPE OneView. The vulnerability was first published on December 16, 2025.

How this analysis works

Attack Flow

Continue Reading

RondoDox Botnet Targets React2Shell Flaw to Spread Malware PowMix Botnet Targets Czech Organizations with Malicious LNK Files RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Vulnerability RondoDox Botnet Exploits HPE OneView Vulnerability RondoDox Botnet Grows, Exploiting 174 Vulnerabilities via Residential IPs RondoDox Botnet Expands by Exploiting Unpatched XWiki RCE Flaw

RondoDox Botnet Launches Attacks Exploiting HPE OneView Vulnerability

Article Content

More articles in this cluster

Attack Flow

Defensive Countermeasures

Extracted Entities

Continue Reading