Multilateral Sanctions Monitoring Team (MSMT) report, 22 Oct 2025
IT worker team deploying BEAVERTAIL and INVISIBLE FERRET malware · since at least June of 2023
(MSMT/2025/2, report p. 95) “This is demonstrated by the identification of an IT worker team, who since at least June of 2023, deployed BEAVERTAIL and INVISIBLE FERRET malware at the direction of a team lead who sought more hacking opportunities.” Also: “In one instance, a North Korean cyber actor collaborated with an IT worker to identify executives in the cryptocurrency industry to target for a cybercrime operation.”