Lazarus Group Exploits Critical Zoho ManageEngine Flaw to Deploy Stealthy QuiteRAT Malware

The North Korea-linked threat actor known as Lazarus Group has been observed exploiting a now-patched critical security flaw impacting Zoho ManageEngine ServiceDesk Plus to distribute a remote access trojan called such as QuiteRAT.
Targets include internet backbone infrastructure and healthcare entities in Europe and the U.S., cybersecurity company Cisco Talos said in a two-part analysis

access actor called critical cybersecurity cybersecurity company deploy entities europe exploiting exploits flaw healthcare infrastructure internet korea lazarus lazarus group malware manageengine north north korea remote access remote access trojan security security flaw threat threat actor trojan zoho zoho manageengine