Operation FlutterBridge Deploys FlutterShell Backdoor via macOS Malvertising
Unit42 uncovered Operation FlutterBridge, a macOS malvertising campaign that drops the FlutterShell backdoor built with Google’s Flutter framework. The payload combines adware with shell command execution and AI‑driven data exfiltration, spreading through Google‑verified ads targeting Western users.