Tool
ThreatLabz
- First Reported
- Feb 26, 2026
- Latest Reported
- May 5, 2026
Reported Context (2)
- In March 2026, Zscaler ThreatLabz identified a campaign leveraging the framework to exploit the growing adoption of agentic AI workflows. The threat actor published a deceptive "DeepSeek-Claw" skill for the OpenClaw Malicious OpenClaw Skill Delivers Remcos RAT and GhostLoader
- In December 2025, Zscaler ThreatLabz discovered a campaign linked to APT37 (also known as ScarCruft, Ruby Sleet, and Velvet Chollima), which is a threat group backed by the North Korean government. In this campaign, APT37 Uses Ruby Jumper Malware to Bridge Air-Gapped Networks via Removable Media
Malware (9)
Threat Actors (4)
MITRE ATT&CK (17)
Vendors (3)
Products (9)
Countries (1)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.