Post

Max Rogers@maxrogers5.com

1⃣ The Huntress team uncovered a campaign by a likely China-nexus threat actor. The most novel finding is use of a publicly available tool called Nezha as a post-exploitation C2 agent. This is the first public reporting of the tool I've seen. www.huntress.com/blog/nezha-c...

huntress.comThe Crown Prince, Nezha: A New Tool Favored by China-Nexus Threat Actors | HuntressBeginning in mid-2025, Huntress discovered a new tool being used to facilitate webserver intrusions known as Nezha, which up until now hasn’t been publicly reported on. This was used in tandem with ot...