Hackers used log poisoning and web shells to convert Nezha into a remote access tool targeting networks across East Asia.

The access afforded by the ANTSWORD web shell is then used to run the "whoami" command to determine the privileges of the web ...

A cyber campaign using Nezha has been identified, targeting vulnerable web apps with PHP web shells and Ghost RAT ...

Fog ransomware hackers are using an uncommon toolset, which includes open-source pentesting utilities and a legitimate employee monitoring software called Syteca. The Fog ransomware operation was ...

This remote access trojan, besides the obvious, also allows threat actors to log keystrokes ... legitimate system tools for execution," LevelBlue said. "Unlike traditional malware that writes payloads ...