HZ RAT Backdoor Slips into macOS Targeting Enterprise Messaging Apps

HZ RAT is a sophisticated backdoor targeting macOS systems, particularly those using DingTalk and WeChat. This macOS variant mirrors its Windows predecessor but delivers payloads as shell scripts from the attacker’s server. The malware’s infrastructure includes multiple C2 servers, primarily in China, with some located in the US and the Netherlands.