North Korean state-sponsored threat actors have been seen targeting macOS users with fake games and crypto tracking apps built with Flutter. Cybersecurity researchers at Jamf recently found several apps on VirusTotal which seemed completely benign, yet connected to servers in North Korea, which was deemed “stage one” malware functionality.

North Korean threat actors target Apple macOS systems using trojanized Notepad apps and minesweeper games created with Flutter, which are signed and notarized by legitimate Apple developer IDs.

Researchers at Jamf Threat Labs have uncovered a series of applications developed by North Korean hackers that managed to bypass Apple’s stringent security protocols, including its notarization process.

North Korean hackers have disguised malware in seemingly harmless macOS apps using sophisticated code to bypass security checks and target unsuspecting users.

Jamf observed North Korean attackers embedding malware within Flutter applications to target macOS devices, potentially to test a new way of weaponizing malware

Hackers associated with North Korea have installed disguised malware in Apple macOS systems by reportedly using Google's Flutter app development tool to bypass security measures.

North Korean hackers deploy Flutter-based malware targeting Apple macOS, evading detection in cryptocurrency attacks.

The attackers are using Google's Flutter platform to make malicious crypto apps that can ultimately grant remote access to a victim's Mac.