Tag: ruby

1 Attack Reports | 0 Vulnerabilities

Attack reports

APT37 Adds New Capabilities for Air-Gapped Networks

APT37, a DPRK-backed threat group, has launched a new campaign called Ruby Jumper, utilizing Windows shortcut files to initiate attacks with newly discovered tools. These tools include RESTLEAF, SNAKEDROPPER, THUMBSBD, and VIRUSTASK, which work together to deliver surveillance payloads like FOOTWIN…
backdoor
surveillance
bluelight
shellcode
dprk
cloud storage
2026-02-26
air-gapped networks
footwine
removable media
restleaf
ruby
snakedropper
thumbsbd
virustask
Published: February 26, 2026
Downloadable IOCs: 3
Click here to see more Attack Reports