SYMBOLCOMMON_NAMEaka. SYNONYMS

Chamelgang  (Back to overview)

aka: CamoFei

In Q2 2021, the PT Expert Security Center incident response team conducted an investigation in an energy company. The investigation revealed that the company's network had been compromised by an unknown group for the purpose of data theft. They gave the group the name ChamelGang (from the word "chameleon"), because the group disguised its malware and network infrastructure under legitimate services of Microsoft, TrendMicro, McAfee, IBM, and Google.


Associated Families

There are currently no families associated with this actor.


References
2024-06-26 ⋅ SentinelOne ⋅ Aleksandar Milenkoski, Julian-Ferdinand Vögele
ChamelGang & Friends | Cyberespionage Groups Attacking Critical Infrastructure with Ransomware
CatB Chamelgang
2021-09-30 ⋅ PTSecurity ⋅ PT Expert Security Center
Masters of Mimicry: new APT group ChamelGang and its arsenal
DoorMe Chamelgang

Credits: MISP Project