Multiple organizations · 05/06/2020
Researchers from Malwarebytes reveal that hackers have hidden malware in MinaOTP, a legitimate two-factor authentication (2FA) app for macOS to distribute Dacls, a remote access trojan associated with the North Korean Lazarus group.
Lazarus’ MacOS Dacls RAT Shows Multi-Platform Ability · 2020-05-11
We found an application sample in April called TinkaOTP, and our investigation showed the application bearing a striking resemblance to Dacls remote access trojan (RAT), a Windows and Linux backdoor discovered in December 2019.
New Mac variant of Lazarus Dacls RAT distributed via Trojanized 2FA app · 2020-05-05T17:00:00+00:00
We believe this Mac variant of the Dcals RAT is associated with the Lazarus group, also known as Hidden Cobra and APT 38, an infamous North Korean threat actor performing cyber espionage and cyber-crime operations since 2009.