InvisibleFerret

InvisibleFerret is a modular python malware that is leveraged for data exfiltration and remote access capabilities.^[1][2][3] InvisibleFerret consists of four modules: main, payload, browser, and AnyDesk.^[1] InvisibleFerret malware has been leveraged by North Korea-affiliated threat actors identified as DeceptiveDevelopment or Contagious Interview since 2023.^[4][2][3][5] InvisibleFerret has historically been introduced to the victim environment through the use of the BeaverTail malware.^{[6][1][2][3][5]}