SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond

**Executive Summary:** SparkRAT is a Golang-based, modular, cross-platform remote access trojan actively used in post-exploitation campaigns (including exploitation of CVE-2024-27198) with evidence of suspected DPRK-linked espionage; Hunt.io identified multiple active C2 servers, payloads (including macOS Mach-O and an Android APK), persistence mechanisms, WebSocket/HTTP C2 behaviors, and concrete IOCs (IPs, ports, SHA-256s) that enable detection and tracking.