The Void Dokkaebi threat group employs a Cython-compiled malware named InvisibleFerret, which is distributed via fake job interview lures and code repositories. The article does not provide a CVSS score, specific affected or fixed software versions, or a workaround for this campaign.
2026-05-22 (Back to Inventory) Analyzing Void Dokkaebi’s Cython-Compiled InvisibleFerret Malware Author(s): Kazuki Fujisawa Organization: Trend Micro js.beavertail py.invisibleferret Open article directly Open article on Archive.org Related Articles 2026-05-04 ⋅ Trend Micro ⋅ Ahmed Mohamed Ibrahim , Aliakbar Zahravi Quasar Linux (QLNX) – A Silent Foothold in the Supply Chain: Inside a Full-Featured Linux RAT With Rootkit, PAM Backdoor, Credential Harvesting Capabilities QLNX 2026-04-30 ⋅ Trend Micro ⋅ Daniel Lunghi , Lucas Silva Inside Shadow-Earth-053: A China-Aligned Cyberespionage Campaign Against Government and Defense Sectors in Asia FINALDRAFT ShadowPad VShell Shadow-Earth-053 2026-04-21 ⋅ Trend Micro ⋅ Lucas Silva Void Dokkaebi Uses Fake Job Interview Lure to Spread Malware via Code Repositories BeaverTail JADESNOW OtterCookie InvisibleFerret