'ChamelGang' APT Disguises Espionage Activities With Ransomware

**Executive Summary:** SentinelOne and other researchers attribute a China-linked APT known as ChamelGang (CamoFei) with multi-year cyber-espionage campaigns against government, critical infrastructure, healthcare (including AIIMS), and other sectors across Asia, the Americas and elsewhere, noting the group's use of tools like Cobalt Strike and CatB ransomware—often deployed late in intrusions—to mask data theft and destroy forensic evidence, complicating attribution and incident response.