North Korean threat actors target Apple macOS systems using trojanized Notepad apps and minesweeper games created with Flutter, which are signed and notarized by legitimate Apple developer IDs.

This can result in developers having their apps rejected simply for forgetting to add an explanation for using the API.