North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for ...
IntroductionIn December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a DPRK-backed threat group. In this campaign ...
If you want a fast, secure, and truly cross-platform local sharing method, LocalSend remains an incredibly versatile daily driver. Besides LocalSend, I also love KDE Connect. It allows you to sync ...
North Korean hackers are deploying newly uncovered tools to move data between internet-connected and air-gapped systems, spread via removable drives, and conduct covert surveillance.
Move to IPC-2581 and leave chaos behind. Reach out to the IPC-2581 Consortium ( info@ipc2581.com) with questions or for assistance on using or migrating to the IPC-2581 format.