FlutterShell Malware Uses C2-Delivered JavaScript Payloads to Evade Sandbox Detection

Targeted macOS endpoint monitoring, the CL-CRI-1089 cluster tied to Operation FlutterBridge repurposes the Flutter framework to deliver a novel macOS malware family dubbed FlutterShell. Rather than rehashing prior campaign reporting, this piece treats recovered artifacts as a technical detection case study built from static analysis of ten Mach‑O samples collected between December 2025 and March […]

The post FlutterShell Malware Uses C2-Delivered JavaScript Payloads to Evade Sandbox Detection appeared first on GBHackers Security | #1 Globally Trusted Cyber Security News Platform.