North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for ...
IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, ...
Windows 11 feeling bloated? Sophia Script lets you reshape the OS from the inside out. Here's how it works.