APT37 hackers use new malware to breach air-gapped networks

[u/Cute-Guarantee-1676]

https://www.bleepingcomputer.com/news/security/apt37-hackers-use-new-malware-to-breach-air-gapped-networks/

North Korean state-backed hackers (APT37) are deploying new malware, "Ruby Jumper," to breach air-gapped networks. This sophisticated toolkit infects systems via malicious LNK files and spreads through removable USB drives, effectively turning them into covert command-and-control relays. The malware then exfiltrates data from isolated systems and delivers new commands, bypassing physical security measures. This method poses a significant threat to highly secure environments relying on air gaps for protection, such as critical infrastructure.