Open-source tool Nezha used as post-exploitation remote access trojan