ALL POSTS

Key Findings LG monitors automatically install companion software on Windows PCs without user consent, triggering McAfee antivirus advertisements The practice exploits Microsoft's device metadata system, which allows hardware vendors to bundle apps alongside drivers McAfee promotions appeared in 31 of 32 system boots during testing, converting trial subscriptions to paid plans automatically The LG Monitor App Installer runs with full system trust privileges outside Windows se

Key Findings Operation FlutterBridge is a sophisticated malvertising campaign targeting macOS users since late 2025, evolving from basic adware into a dangerous backdoor called FlutterShell Threat actors use fake shell companies to purchase verified Google and YouTube ads, bypassing security filters through artificial aging and legitimate developer credentials The malware masquerades as productivity tools including Podcasts Lounge, PDF-Brain, and PDF-Ninja, with three distinc