Invisibleferret Python Backdoor Artifact

Arnold Chan@slaz

•updated Sep 19, 2026•0•0•3

Detects file artifacts referencing InvisibleFerret, a Python-based backdoor used by WaterPlum/North Korean IT worker actors for persistent access to victim networks