In fact, RondoDox seems to be used for stealth proxies, hiding command-and-control (C2) traffic for even more malicious activities. It is also used to run layered scams, or to amplify DDoS-for-hire ...