AN UNUSUALLY ADVANCED hacking group has spent almost two years infecting a wide range of routers in North America and Europe with malware that takes full control of connected devices running Windows, macOS, and Linux, researchers reported on June 28. ... Dubbed ZuoRAT, the remote access Trojan is part of a broader hacking campaign that has existed since at least the fourth quarter of 2020 and continues to operate. ... The campaign comprises at least four pieces of malware, three of them written from scratch by the threat actor. The first piece is the MIPS-based ZuoRAT... Two of those malware pieces—dubbed CBeacon and GoBeacon—are custom-made... ZuoRAT can also infect connected devices with the widely used Cobalt Strike hacking tool.