Fake Zoom Installer Delivers Overlord RAT on macOS

Reported 07 Aug 2026 by otx · Severity: medium

A sophisticated macOS campaign has been discovered using a fake Zoom installer to deploy Overlord RAT, an open-source remote access framework. The attack employs a .NET-based downloader disguised as ZoomMeetings, representing an uncommon approach for macOS threats. The multi-stag