Nezha Monitoring Tool Exploited as Remote Access Trojan by Cybercriminals

Cybersecurity researchers at Ontinue’s Cyber Defense Center have identified that the Nezha monitoring tool, originally designed for server management, is being exploited by threat actors as a Remote Access Trojan (RAT). This misuse allows attackers to gain full control over compromised systems while avoiding detection by traditional security measures. The tool is widely used across Windows and Linux environments.