Skip to main content
Skip to main content
Microsoft Security Intelligence
Published Apr 09, 2025 | Updated May 02, 2025

Backdoor:Python/InvisibleFerret.A!dha

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

This detection is related to a North Korean threat actor campaign leveraging the InvisibleFerret malware to target individuals and organizations. The campaign aims to steal sensitive information, including browser data, cryptocurrency wallets, and system credentials, for financial gain.

Microsoft Defender Antivirus automatically removes threats as they are detected. However, many infections can leave remnant files and system changes. Updating your antimalware definitions and running a full scan might help address these remnant artifacts.

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

Follow us