InvisibleFerret Python Infostealer Accessing Crypto Wallet Files on Developer Machine

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•0•1

Detects Python-based processes accessing sensitive local cryptocurrency wallet files and directories, including MetaMask extension storage, Exodus wallet, and Bitcoin wallet files, which are known targets of the InvisibleFerret infostealer.