GeoServer's RCE flaw (CVE-2024-36401) is actively exploited to deploy NetCat reverse shells and XMRig CoinMiners on Windows/Linux, hijacking resources.
netcat
AnyDesk is installed using Netcat, allowing attackers to control the system's screen remotely, bypassing security products