---
title: "#scarcruft articles | Hashnode"
description: "Explore 2 articles tagged #scarcruft on Hashnode. Tutorials, guides, and how-tos from the community."
url: "https://hashnode.com/tag/scarcruft"
---

Tag

# #scarcruft

2 posts · 0 followers

[DeepSeaX](https://hashnode.com/@deepseax) · [Feb 27](https://hashnode.com/posts/scarcruft-ruby-jumper-how-north-korean-hackers-breach-air-gapped-networks-via-usb-and-zoho-workdrive-in-2026/69a1a55212ef924a7bf83806)

### [ScarCruft Ruby Jumper: How North Korean Hackers Breach Air-Gapped Networks via USB and Zoho WorkDrive in 2026](https://deepseax.hashnode.dev/scarcruft-ruby-jumper-how-north-korean-hackers-breach-air-gapped-networks-via-usb-and-zoho-workdrive-in-2026?utm_source=hashnode&utm_medium=feed)

North Korea's ScarCruft (APT37) just raised the bar for air-gapped network attacks. Their new Ruby Jumper campaign, discovered by Zscaler ThreatLabz in December 2025, deploys six custom malware families — including a backdoor that abuses Zoho WorkDri...

5 min read · [deepseax.hashnode.dev](https://deepseax.hashnode.dev/scarcruft-ruby-jumper-how-north-korean-hackers-breach-air-gapped-networks-via-usb-and-zoho-workdrive-in-2026?utm_source=hashnode&utm_medium=feed)