Flotilla: Anatomy of an Undocumented Cross-Platform Covert-Browser Botnet Delivered Through the GCleaner Channel
Malware Analysis Aug 15, 2026

Flotilla: Anatomy of an Undocumented Cross-Platform Covert-Browser Botnet Delivered Through the GCleaner Channel

An undocumented Turkish-language malware platform running a covert Electron browser botnet on Windows and arm64 agents on macOS, sharing one epoch-synced control plane. Full reverse engineering, live infrastructure verified.

Read Article