Suspected Chinese gov’t hackers used ransomware as cover in attacks on Brazil presidency, Indian health org

Researchers from SentinelOne, Recorded Future and TeamT5 report that suspected Chinese APT group ChamelGang has increasingly used ransomware (including CatB) against high-value targets — such as Brazil’s presidency and India’s AIIMS healthcare platform — to cause disruption, obscure espionage activity, and destroy evidence; the report also notes other clusters using BestCrypt/BitLocker and highlights deception and misattribution risks between law enforcement and intelligence communities.