ChamelGang & Friends | Cyberespionage Groups Attacking Critical Infrastructure with Ransomware

Executive Summary

• Threat actors in the cyberespionage ecosystem are engaging in an increasingly disturbing trend of using ransomware as a final stage in their operations for the purposes of financial gain, disruption, distraction, misattribution, or removal of evidence.


• This report introduces new findings about notable intrusions in the past three years, some of which were carried out by a Chinese cyberespionage actor but remain publicly unattributed.


• Our findings indicate that ChamelGang, a suspected Chinese APT group, targeted the major Indian …

critical critical infrastructure cyberespionage disruption ecosystem evidence executive financial findings friends infrastructure malware analysis operations ransomware report stage threat threat actors trend using