Contagious Interview BeaverTail/InvisibleFerret browser & SSH credential harvesting

Ibrahim Saud@tektrix

•updated Jun 30, 2026•0•1•2

Detects unauthorized processes (Python, Node.js) accessing sensitive files such as browser login data, cookie stores, wallet files, and SSH/AWS keys, which are common indicators of credential theft and data exfiltration.