Security News ScarCruft Uses Zoho WorkDrive and USB Malware to Breach Air-Gapped Networks TheHackerNews Daniel Bender 27 Feb 2026 North Korea-linked ScarCruft’s Ruby Jumper uses Zoho WorkDrive C2 and USB malware to breach air-gapped systems for surveillance.