TCO!Stream is an MLsoft enterprise asset-management platform whose server can distribute software and remotely control its resident clients. Lazarus exploited its remote-code-execution weakness for lateral movement, sending crafted commands that caused clients to retrieve and execute attacker-prepared malware from the management server.