All Detections

FlexibleFerret Go Runtime Execution Detection

Effy Elden@ineffyble
updated Nov 26, 20251044

Detects Go runtime executing scripts from temporary directories, indicative of FlexibleFerret backdoor.

Sigma