InvisibleFerret malware now uses .pyd and .so files to evade script-based detection

North Korea-linked hackers have updated InvisibleFerret, a malware family used to steal credentials, cryptocurrency wallet data, and developer secrets. The newest version no longer arrives mainly as readable Python scripts. It now ships as Cython-compiled .pyd files on Windows and .so files on macOS. The change makes the malware harder to catch with older detection […] The post InvisibleFerret malware now uses .pyd and .so files to evade script-based detection appeared first on VPN Central.