Tag: china-linked

1 Attack Reports | 0 Vulnerabilities

Attack reports

Nezha Tool Used in New Cyber Campaign Targeting Web Applications

A sophisticated cyber campaign utilizing the open-source Nezha tool has been discovered targeting vulnerable web applications since August 2025. Attackers gained access through an exposed phpMyAdmin panel, employing creative log poisoning techniques to implant a PHP web shell. The intrusion involve…
antsword
ghost rat
2025-10-08
phpmyadmin
log poisoning
nezha
mariadb
china-linked
web applications
Published: October 8, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports