RondoDox
Reports
3
First seen
May 25, 2026
Last seen
Aug 18, 2026
Motivation
Financial
Relationships
Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.
Top ATT&CK techniques
T1190 Exploit Public-Facing Application ×3T1059 Command and Scripting Interpreter ×3T1566 Phishing ×2T1195 Supply Chain Compromise ×2T1041 Exfiltration Over C2 Channel ×1T1598 Phishing for Information ×1T1021 Remote Services ×1T1005 Data from Local System ×1T1195.002 Compromise Software Supply Chain ×1T1200 Traffic Signaling ×1T1110 Brute Force ×1T1496 Resource Hijacking ×1
Indicators
cve ×41filename ×2
Indicator values are available on Pro and via the API.