Chinese-aligned hacking group targeted more than a dozen government agencies, researchers find

Talos researchers have identified an aggressive Chinese-speaking cyberespionage actor dubbed “SneakyChef” that has targeted foreign ministries and embassies in at least nine countries using customized Gh0st RAT (SugarGh0st) and a newly observed SpiceRAT delivered via spearphishing emails with non-public scanned government documents as decoys; the activity is widespread, rapidly evolving, and may be state-aligned.