Threats Tagged 'fluttershell'

Operation FlutterBridge is a malvertising campaign targeting macOS systems with the FlutterShell backdoor malware. The malware is disguised as legitimate applications and uses a Flutter-based WebView architecture with a JavaScript-to-native bridge to enable dynamic behavior changes. It is distributed via Google-verified ads controlled by shell companies and signed with valid Apple Developer IDs, passing notarization to evade detection. The malware enables full backdoor capabilities including shell command execution and file system manipulation, and hijacks Google Chrome browsers to redirect traffic. The campaign primarily targets Anglophone and Western European markets. No official patch or remediation guidance is currently available.