Hunters International Disguises SharpRhino RAT as Legitimate Network Admin Tool

Researchers from Quorum Cyber identified SharpRhino, a novel RAT used by Hunters International to masquerade as Angry IP Scanner, establish persistence (registry Run key and ProgramData directories), and enable deployment of Hive ransomware; the group leverages RaaS, abused code-signing certificates, and opportunistic targeting, with indicators of compromise and MITRE ATT&CK mappings provided to help defenders.