InvisibleFerret

{
  "id": "ATTACK:enterprise:S1245",
  "title": "InvisibleFerret",
  "type": "Software",
  "source_url": "https://attack.mitre.org/software/S1245",
  "snapshot": "enterprise-attack-20.0.json",
  "status": "active",
  "rights": "Source metadata only; source notices retained; no operational prose or payloads",
  "review_status": "machine-extracted; source-specific checks passed, editorial review pending",
  "stix_id": "malware--1dac60f2-7d53-4a3e-95d1-cb2e875d5491",
  "external_id": "S1245",
  "domain": "enterprise",
  "created": "2025-10-17T18:27:06.742Z",
  "modified": "2025-10-24T03:20:59.458Z",
  "version": "1.0",
  "aliases": [

  ],
  "tactics": [

  ],
  "source_references": [
    {
      "source_name": "Esentire ContagiousInterview BeaverTail InvisibleFerret November 2024",
      "url": "https://www.esentire.com/blog/bored-beavertail-invisibleferret-yacht-club-a-lazarus-lure-pt-2"
    },
    {
      "source_name": "Recorded Future Contagious Inteview BeaverTail InvisibleFerret OtterCookie February 2025",
      "url": "https://www.recordedfuture.com/research/inside-the-scam-north-koreas-it-worker-threat"
    },
    {
      "source_name": "ESET Contagious Interview BeaverTail InvisibleFerret February 2025",
      "url": "https://www.welivesecurity.com/en/eset-research/deceptivedevelopment-targets-freelance-developers/"
    },
    {
      "source_name": "Zscaler ContagiousInterview BeaverTail InvisibleFerret November 2024",
      "url": "https://www.zscaler.com/blogs/security-research/pyongyang-your-payroll-rise-north-korean-remote-workers-west"
    },
    {
      "source_name": "PaloAlto ContagiousInterview BeaverTail InvisibleFerret November 2023",
      "url": "https://unit42.paloaltonetworks.com/two-campaigns-by-north-korea-bad-actors-target-job-hunters/"
    },
    {
      "source_name": "PaloAlto Unit42 ContagiousInterview BeaverTail InvisibileFerret October 2024",
      "url": "https://unit42.paloaltonetworks.com/north-korean-threat-actors-lure-tech-job-seekers-as-fake-recruiters/"
    }
  ]
}