Malware
SimpleTea
SimpleTea is a RAT for macOS that is based on the same object-oriented project as SimpleTea for Linux (SimplexTea).
SimpleTea is a macOS malware family operated by Lazarus Group.
Background
SimpleTea is a macOS RAT built on the same object-oriented project that underlies the Linux SimpleTea (SimplexTea).
It also resembles POOLRAT (also known as SIMPLESEA) in aspects such as its supported command set and the single-byte XOR encryption applied to its configuration, though the command indices differ between them.
The macOS build of SimpleTea was submitted to VirusTotal from Hong Kong and China in September 2023.
Source: Malpedia (Fraunhofer FKIE).