InvisibleFerret Crypto Wallet Theft by Python or Node Process
Detects Python or Node.js interpreter processes accessing sensitive files related to cryptocurrency wallets and browser extensions, a behavior consistent with information-stealer malware such as InvisibleFerret used in the Contagious Interview campaign.
Microsoft Sentinel (KQL)
