ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks
- Posted on February 27, 2026
- By The Hacker News
- 3 Views
ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks

North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for surveillance.