Nezha Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
7
occurrences
First Seen
December 22, 2025
Last Seen
August 19, 2026

Related Threat Clusters

  • Ransomware Fuels Surge in Global Cyberattacks

    As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…

    1870 articles · Updated February 12, 2026
  • Nezha Monitoring Tool Exploited as Remote Access Trojan by Cybercriminals

    Cybersecurity researchers at Ontinue’s Cyber Defense Center have identified that the Nezha monitoring tool, originally designed for server management, is being exploited by threat actors as a Remote Access Trojan (RAT).…

    6 articles · Updated December 23, 2025
  • OpenAI Enhances ChatGPT Security; Ivanti EPMM Backdoors Exploited

    OpenAI has implemented two new security features in ChatGPT to prevent prompt injection attacks. Meanwhile, threat actors have exploited two Ivanti zero-day vulnerabilities, CVE-2026-1281 and CVE-2026-1340, to deploy…

    3 articles · Updated February 18, 2026

Recent Intelligence Reports

  • Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware — Infosecurity-Magazine · August 19, 2026
  • Attackers Deploy Dormant Backdoors in Ivanti EPMM to Bypass Patching of Latest 0 — Thecyberexpress · February 18, 2026
  • Threat Actors Weaponize Nezha Monitoring Tool as a Remote Access Trojan — Gbhackers · December 24, 2025
  • Threat Actors Weaponizing Nezha Monitoring Tool as Remote Access Trojan — Cybersecuritynews · December 23, 2025
  • Attackers transform Nezha from a benign monitoring utility into an effective access tool — Cyberpress · December 23, 2025
  • Monitoring Tool Nezha Abused For Stealthy Post — Infosecurity-Magazine · December 22, 2025
  • Hackers Abuse Popular Monitoring Tool Nezha as a Stealth Trojan — Hackread · December 22, 2025

CVSS v3.1 Breakdown