A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT ...
Hackers used log poisoning and web shells to convert Nezha into a remote access tool targeting networks across East Asia.