Tag: operation flutterbridge

1 Attack Reports | 0 Vulnerabilities

Attack reports

Operation FlutterBridge: The FlutterShell macOS Backdoor

FlutterShell is a macOS backdoor campaign active from December 2025 to March 2026, identified as cluster CL-CRI-1089 under Operation FlutterBridge. The threat actors deliberately misused the Flutter framework to deliver malware through malvertising campaigns on Google and YouTube. The malware emplo…
certificate rotation
browser hijacking
fluttershell
2026-06-19
c2-conditional payload
dart obfuscation
flutter framework abuse
macos backdoor
operation flutterbridge
Published: June 19, 2026
Downloadable IOCs: 24
Click here to see more Attack Reports