Tag: jscorerunner

2 Attack Reports | 0 Vulnerabilities

Attack reports

Operation FlutterBridge: macOS Malvertising Campaign Spreads New FlutterShell Backdoor

A financially-motivated cybercrime cluster designated CL-CRI-1089 has launched Operation FlutterBridge, deploying FlutterShell backdoor malware targeting macOS systems through malvertising. Built with the Flutter framework, FlutterShell masquerades as legitimate applications including podcast playe…
backdoor
macos
google ads
jscorerunner
browser hijacking
calendaromatic
shell companies
2026-06-02
flutterbridge
fluttershell
javascript bridge
recipelister
Published: June 2, 2026
Downloadable IOCs: 9

New Mac malware identified that evades detection through fake PDF conversion tool

Mosyle has discovered a new Mac malware strain called 'JSCoreRunner' that evades detection by masquerading as a PDF conversion tool. The malware spreads through a malicious website, fileripple.com, and operates in two stages. The first stage, FileRipple.pkg, appears as a legitimate PDF tool while r…
2025-08-29
mac
chrome hijacking
apple security
jscorerunner
mosyle
zero-day threat
two-stage infection
fileripple.com
pdf conversion
browser redirection
Published: August 29, 2025
Downloadable IOCs: 0
Click here to see more Attack Reports