North Korean Hackers Disguise Malware in macOS Apps: Here’s How to Stay Safe
North Korean hackers have created malware embedded in seemingly harmless macOS apps using the popular app-building tool Flutter. The malicious code is hard to detect as it is hidden within the dylib file, a dynamic library later loaded by Flutter's engine. Three versions of the malware were found tailored to different programming environments - Flutter, Go, and Python. All three used similar methods to reach out to external servers believed to be under North Korean control to execute additional malicious commands.