Back Hackread

Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan

Hackread •Deeba Ahmed • December 22, 2025

Cybersecurity firm Ontinue reveals how the open-source tool Nezha is being used as a Remote Access Trojan (RAT) to bypass security and control servers globally.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Nezha Monitoring Tool Exploited as Remote Access Trojan by Cybercriminals Cybersecurity researchers at Ontinue’s Cyber Defense Center have identified that the Nezha monitoring tool, originally designed for server management, is being exploited by threat actors as a Remote Access Trojan (RAT). This misuse allows attackers to gain full control over compromised systems while avoiding detection by traditional security measures. The tool is widely used across Windows and Linux environments. 6 sources 47

Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan

The full story

Extracted Entities

Attack Types (1)

Malware (1)