Skip to content

InvisibleFerret

Linked Threat Actors

WageMole

C2 Infrastructure

Hosting/VPS 100%

Last 7 days

Jul 15, 2026
C2 Hosts: 3

Further Reading

any.run opens in a new tab
any.run
any.run opens in a new tab
any.run
blog.nviso.eu opens in a new tab
blog.nviso.eu
blog.talosintelligence.com opens in a new tab
blog.talosintelligence.com
doi.org opens in a new tab
doi.org
expel.com opens in a new tab
expel.com
github.com opens in a new tab
github.com
gitlab-com.gitlab.io opens in a new tab
gitlab-com.gitlab.io
jp.security.ntt opens in a new tab
jp.security.ntt
jp.security.ntt opens in a new tab
jp.security.ntt
medium.com opens in a new tab
medium.com
objective-see.org opens in a new tab
objective-see.org
opensourcemalware.com opens in a new tab
opensourcemalware.com
opensourcemalware.com opens in a new tab
opensourcemalware.com
quetzal.bitso.com opens in a new tab
quetzal.bitso.com
radar.securityalliance.org opens in a new tab
radar.securityalliance.org
redasgard.com opens in a new tab
redasgard.com
research.hisolutions.com opens in a new tab
research.hisolutions.com
security.macnica.co.jp opens in a new tab
security.macnica.co.jp
securitylabs.datadoghq.com opens in a new tab
securitylabs.datadoghq.com
securityscorecard.com opens in a new tab
securityscorecard.com
securityscorecard.com opens in a new tab
securityscorecard.com
socket.dev opens in a new tab
socket.dev
socket.dev opens in a new tab
socket.dev
socket.dev opens in a new tab
socket.dev
socket.dev opens in a new tab
socket.dev
socket.dev opens in a new tab
socket.dev
stacklok.com opens in a new tab
stacklok.com
unit42.paloaltonetworks.com opens in a new tab
unit42.paloaltonetworks.com
unit42.paloaltonetworks.com opens in a new tab
unit42.paloaltonetworks.com
web-assets.esetstatic.com opens in a new tab
web-assets.esetstatic.com
web.archive.org opens in a new tab
web.archive.org
www-cdn.anthropic.com opens in a new tab
www-cdn.anthropic.com
abstract.security opens in a new tab
abstract.security
bitdefender.com opens in a new tab
bitdefender.com
cert.si opens in a new tab
cert.si
esentire.com opens in a new tab
esentire.com
group-ib.com opens in a new tab
group-ib.com
microsoft.com opens in a new tab
microsoft.com
recordedfuture.com opens in a new tab
recordedfuture.com
recordedfuture.com opens in a new tab
recordedfuture.com
silentpush.com opens in a new tab
silentpush.com
trendmicro.com opens in a new tab
trendmicro.com
trendmicro.com opens in a new tab
trendmicro.com
trendmicro.com opens in a new tab
trendmicro.com
virusbulletin.com opens in a new tab
virusbulletin.com
welivesecurity.com opens in a new tab
welivesecurity.com
welivesecurity.com opens in a new tab
welivesecurity.com
zscaler.com opens in a new tab
zscaler.com

We appreciate you

Derp wouldn't exist without the work these projects do for the security community. We rely on their data sources to improve the quality and depth of what we publish. Thank you, we're genuinely grateful.