Skip to main content Threats Blogs Antimalware updates Definition change log Windows security Microsoft Defender ATP Microsoft Threat Protection Malicious Software Removal Tool (MSRT) Safety Scanner Microsoft Defender Offline Submit a file View submission history Report unsafe site Attack surface reduction Sources of infection Avoid tech support scams Troubleshoot detection and removal Up-to-date software Developer resources Threat naming Threat identification criteria Security industry alliances Microsoft Security Azure Dynamics 365 Microsoft 365 Microsoft Teams Windows 365 Microsoft AI Azure Space Mixed reality Microsoft HoloLens Microsoft Viva Quantum computing Sustainability Education Automotive Financial services Government Healthcare Manufacturing Retail Find a partner Become a partner Partner Network Microsoft Marketplace Software companies Blog Microsoft Advertising Developer Center Documentation Events Licensing Microsoft Learn Microsoft Research View Sitemap
Published Apr 09, 2025 | Updated May 02, 2025

Backdoor:Python/InvisibleFerret.A!dha

Detected by Microsoft Defender Antivirus

Aliases: No associated aliases

Summary

This detection is related to a North Korean threat actor campaign leveraging the InvisibleFerret malware to target individuals and organizations. The campaign aims to steal sensitive information, including browser data, cryptocurrency wallets, and system credentials, for financial gain.

Microsoft Defender Antivirus automatically removes threats as they are detected. However, many infections can leave remnant files and system changes. Updating your antimalware definitions and running a full scan might help address these remnant artifacts.

You can also visit our advanced troubleshooting page or search the Microsoft virus and malware community for more help.

Follow us
English (United States)
Your Privacy Choices Opt-Out Icon Your Privacy Choices
Consumer Health Privacy Sitemap Contact Microsoft Privacy Manage cookies Terms of use Trademarks Safety & eco Recycling About our ads