Intel Chain
Cybersecurity researchers have shed light on a macOS malvertising campaign codenamed Operation FlutterBridge that spreads a new backdoor called FlutterShell. According to Palo Alto Networks Unit 42, the campaign is said to be the next stage of a previously reported activity cluster dubbed JSCoreRunner (aka FileRipple) in late August 2025. The cybercrime group behind the two attack chains is Source: The Hacker News
Evidence Chain (2 linked intel)
Unknown attackers spent at least five months inside the Outlook mailbox of a senior executive at a major global stock exchange, copying the inbox out in small, repeated batches and routing it through Dropbox and OneDrive so the traffic blended into normal cloud activity. Symantec and Carbon Black's Threat Hunter Team reported the campaign this week. This points to espionage, not a money grab: Source: The Hacker News
Mladenov’s plan turns rebuilding from a humanitarian obligation into a weapon of political control. Source: Al Jazeera – Breaking News, World News and Video from Al Jazeera
Have related intel?
Corroborate, contradict, or expand this intelligence chain.