
A recent report by SentinelOne and RecordedFuture highlights a disturbing trend where cyberespionage groups are using ransomware as a final stage in their operations for financial gain. The report, covered by The Washington Post, reveals that these operations provide adversarial countries with plausible deniability. Notably, Chinese cyberespionage group ChamelGang has been employing ransomware to attack critical infrastructure, including the presidential office of Brazil. The research indicates that these attacks serve to disguise the true intent of data theft, disruption, and diversion.
🇨🇳 cyberespionage group ChamelGang — believed to be working for the 🇨🇳 government — is increasingly deploying ransomware in an effort to cause disruption and provide cover for espionage operations — most notably in attacks on the presidential office of Brazil and on a key… https://t.co/od9HmFSIAd
We knew some ransomware attacks are a cover for nation-state espionage but not much has been written about it. Here's good research from @RecordedFuture & @SentinelOne about Chinese APT that deploys ransomware in last stage of spy op for purposes of financial…
Chinese State Actors Use Ransomware to Conceal Real Intent https://t.co/CBG2jXCfIm






