Lazarus deploys new attack tool, MagicRAT to target organizations worldwide

Red | Vulnerability Report

Lazarus, a North Korean threat actor, compromises vulnerable VMware Horizon servers and deploys MagicRAT, a new remote access tool developed by the attackers. MagicRAT creates scheduled tasks on compromised systems to achieve persistence. Additionally, it gives the attacker a remote shell to execute arbitrary commands and manipulate files.

Reduce real exposure. Not just vulnerability volume.