Lazarus deploys new attack tool, MagicRAT to target organizations worldwide

Threat Level – Red | Vulnerability Report
Download PDF

Lazarus, a North Korean threat actor, compromises vulnerable VMware Horizon servers and deploys MagicRAT, a new remote access tool developed by the attackers. MagicRAT creates scheduled tasks on compromised systems to achieve persistence. Additionally, it gives the attacker a remote shell to execute arbitrary commands and manipulate files.

What’s new on HivePro

Get through updates and upcoming events, and more directly in your inbox