CyberSec Sentinel profiles the DPRK-linked FERRET malware family used in fake job and spear-phishing operations against macOS users. The source describes variants such as InvisibleFerret, FRIENDLYFERRET, FROSTYFERRET_UI, FlexibleFerret, and BeaverTail, with capabilities for persistence, credential theft, system reconnaissance, remote command execution, and file exfiltration. FlexibleFerret is described as using legitimate-looking applications, LaunchAgent persistence, signed or disguised components, Dropbox exfiltration, and api.ipify.org public-IP checks, with targeting noted across defense, aerospace, nuclear, engineering, and cryptocurrency sectors.