#zoho


Mustang Panda Uses Zoho WorkDrive as Command Channel in Indian Government Attacks

Jun 29, 2026 // 19:35

The China-aligned espionage group Mustang Panda is running two campaigns against the Indian government and hydropower targets, deploying new malware and turning a legitimate cloud service into […]

ScarCruft Targets Air-Gapped Networks via Zoho WorkDrive and USB Malware

Feb 27, 2026 // 16:55

ScarCruft (also known as APT37), a North Korean state-sponsored threat actor, has launched a sophisticated cyber espionage campaign named Ruby Jumper. Recently documented by Zscaler ThreatLabz, the campaign […]