North Korean state-sponsored threat actors have been seen targeting macOS users with fake games and crypto tracking apps built with Flutter. Cybersecurity researchers at Jamf recently found several apps on VirusTotal which seemed completely benign, yet connected to servers in North Korea, which was deemed “stage one” malware functionality.

North Korean threat actors target Apple macOS systems using trojanized Notepad apps and minesweeper games created with Flutter, which are signed and notarized by legitimate Apple developer IDs.

North Korean hackers have disguised malware in seemingly harmless macOS apps using sophisticated code to bypass security checks and target unsuspecting users.

North Korean hackers are targeting Mac users with malware hidden in what appear to be harmless macOS apps. The new malware uses sophisticated code to circumvent traditional Mac security checks.

Jamf observed North Korean attackers embedding malware within Flutter applications to target macOS devices, potentially to test a new way of weaponizing malware

North Korean hackers deploy Flutter-based malware targeting Apple macOS, evading detection in cryptocurrency attacks.

The attackers are using Google's Flutter platform to make malicious crypto apps that can ultimately grant remote access to a victim's Mac.