“`html

Malicious players with alleged connections to China have transformed a legitimate open-source surveillance tool named Nezha into a weapon for attacks, employing it to deploy a recognized malware known as Gh0st RAT to targets.

This operation, detected by cybersecurity firm Huntress in August 2025, is marked by the employment of an atypical method referred to as log contamination (also known as log injection) to embed a web shell on a website.

“`