Attackers transform Nezha from a benign monitoring utility into an effective access tool

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nezha Monitoring Tool Exploited as Remote Access Trojan by Cybercriminals Cybersecurity researchers at Ontinue’s Cyber Defense Center have identified that the Nezha monitoring tool, originally designed for server management, is being exploited by threat actors as a Remote Access Trojan (RAT). This misuse allows attackers to gain full control over compromised systems while avoiding detection by traditional security measures. The tool is widely used across Windows and Linux environments. 6 sources 47