RondoDox botnet exploited React2Shell to compromise IoT devices and Next.js servers over a nine-month global campaign.