Product
Ruby
- First Reported
- Feb 26, 2026
- Latest Reported
- Feb 26, 2026
Reported Context (1)
- In December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a threat group backed by the North Korean government. In this campaign, APT37 Uses Ruby Jumper Malware to Bridge Air-Gapped Networks via Removable Media
Malware (6)
Threat Actors (4)
MITRE ATT&CK (9)
Vendors (2)
Products (6)
Tools (1)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.