New macOS malware HZ RAT gives attackers backdoor access to Macs

Topic

New Reply

https://www.intego.com/mac-security-blog/new-macos-malware-hz-rat-gives-attackers-backdoor-access-to-macs/

..HZ RAT is a remote access Trojan (RAT)—a tool that gives an attacker full remote administration privileges. The earliest known version of this RAT was observed in 2022 targeting Windows PCs, and now it has arrived on the Mac.

In general, an attacker who controls a RAT can send commands to an infected system just as though they were sitting in front of it. This can potentially include downloading and running additional tools and malware, taking screenshots, logging keystrokes, and more. RATs also allow attackers to do all the typical things stealer malware does—i.e. collecting and exfiltrating sensitive data…

..one known Trojan horse that installs HZ RAT is a maliciously modified version of OpenVPN Connect, a common VPN app…It’s possible that this Trojan horse might be distributed through means such as malicious Google Ads that appear at the top of search results..

Reply | Quote

Replies

Paraphrasing:

We don’t know how you get this malware but our AV product definitely stops it.
BTW, so do a whole bunch of other AV products.
You should not run software from unknown sources.

Clickbait?

cheers, Paul

Reply | Quote

Paul T wrote:

You should not run software from unknown sources

But the EU demands external apps stores. Are all known sources ?

Reply | Quote

I was quoting your source…

cheers, Paul

Reply | Quote