FlutterShell Backdoor Spreads to macOS via Malicious Google and YouTube Ads
Palo Alto Networks Unit 42 described a macOS malvertising campaign called Operation FlutterBridge that distributes the FlutterShell backdoor through malicious Google and YouTube ads. The ads trick users into installing malicious applications disguised as legitimate desktop software.
CERT24