Intrusions commence lures to install HZ RAT for macOS as an OpenVPN Connect-spoofing installer, which when executed triggers shell command execution, file writing to disk, file delivery to the command-and-control server, and device availability monitoring.
Article Link: New HZ RAT malware for macOS sets sights on Chinese messaging apps | SC Media