Loading ATT&CK
Detections can measure how the public catalogue is used — which detections people look for, and which pages bring them here. It sets a cookie that recognises this browser for 180 days. It is never linked to an account and never follows you to other sites. Privacy notice
InvisibleFerret is a modular python malware that is leveraged for data exfiltration and remote access capabilities.(Citation: ESET Contagious Interview BeaverTail InvisibleFerret February 2025) (Citation: Zscaler ContagiousInterview BeaverTail InvisibleFerret November 2024) (Citation: PaloAlto ContagiousInterview BeaverTail InvisibleFerret November 2023) InvisibleFerret consists of four modules: main, payload, browser, and AnyDesk.(Citation: ESET Contagious Interview BeaverTail InvisibleFerret February 2025) InvisibleFerret malware has been leveraged by North Korea-affiliated threat actors identified as DeceptiveDevelopment or Contagious Interview since 2023.(Citation: Recorded Future Contagious Inteview BeaverTail InvisibleFerret OtterCookie February 2025) (Citation: Zscaler ContagiousInterview BeaverTail InvisibleFerret November 2024) (Citation: PaloAlto ContagiousInterview BeaverTail InvisibleFerret November 2023) (Citation: PaloAlto Unit42 ContagiousInterview BeaverTail InvisibileFerret October 2024) InvisibleFerret has historically been introduced to the victim environment through the use of the BeaverTail malware.(Citation: Esentire ContagiousInterview BeaverTail InvisibleFerret November 2024) (Citation: ESET Contagious Interview BeaverTail InvisibleFerret February 2025) (Citation: Zscaler ContagiousInterview BeaverTail InvisibleFerret November 2024) (Citation: PaloAlto ContagiousInterview BeaverTail InvisibleFerret November 2023) (Citation: PaloAlto Unit42 ContagiousInterview BeaverTail InvisibileFerret October 2024)
Only techniques sit in a kill chain phase.
| Direction | Type | Related object |
|---|---|---|