BridgeHead is a custom WebSocket tunneler used by Nimbus Manticore to maintain persistent access to compromised systems. It is part of the threat actor's toolset, often used in conjunction with backdoors like NightLedger to evade detection and ensure reliable C2 communications.