{
  "name": "Chamelgang & Friends | Cyberespionage Groups Attacking Critical Infrastructure with Ransomware",
  "slug": "chamelgang-friends-cyberespionage-groups-attacking-critical-infrastructure-with-ransomware",
  "description": "In collaboration with Recorded Future, SentinelLabs has been tracking two distinct activity clusters targeting government and critical infrastructure sectors globally between 2021 and 2023.",
  "published": "2024-06-26T15:32:52+00:00",
  "created_at": "2024-06-26T15:32:52+00:00",
  "modified_at": "2024-06-26T15:55:40+00:00",
  "created_at_opencti": "2024-06-26T15:32:52+00:00",
  "author": "",
  "confidence": null,
  "report_types": [],
  "labels": [],
  "tags": [
    "2024-06-26",
    "beaconloader",
    "bestcrypt",
    "bitlocker",
    "chamelgang",
    "china chopper",
    "cobalt strike",
    "conti",
    "icedid",
    "ransomware",
    "silver sparrow",
    "wiper"
  ],
  "related_entities": {
    "observables": [
      {
        "id": "",
        "name": "185.225.19.61"
      },
      {
        "id": "",
        "name": "cf2b73f77761f4441f9c31512d58709f5d9d59eef6514857a5e37b8c4e956c3a"
      },
      {
        "id": "",
        "name": "8679c9e96394c39fa5eeb277a7e28313ef502be5d8401c43fa9955820962add0"
      },
      {
        "id": "",
        "name": "806761850d19f0cc9f41618e74db471e85c494e952f900f827c1779f2d1c4d31"
      },
      {
        "id": "",
        "name": "7604e9ecedf298907e537e50b9c74006640561b32265c3ebba38e587166f67ab"
      },
      {
        "id": "",
        "name": "49292dd838429bcf4aaf77ff6960156edaf1ec094ee4e6b9863c5d5fc9d32279"
      },
      {
        "id": "",
        "name": "9990388776daa57d2b06488f9e2209e35ef738fd0be1253be4c22a3ab7c3e1e2"
      },
      {
        "id": "",
        "name": "bc1qakuel0s4nyge9rxjylsqdxnn9nvyhc2z6k27gz"
      }
    ],
    "intrusion_sets": [
      {
        "id": "1d810fda-c497-4be7-80b4-54cd05f107cf",
        "name": "ChamelGang",
        "slug": "chamelgang"
      }
    ],
    "attack_patterns": [
      {
        "id": "eb60c94a-2d33-4605-ab3f-982fac7c223b",
        "name": "T1022"
      },
      {
        "id": "2fca0274-42fc-483e-a1e3-d9c4ba687d2d",
        "name": "T1574.001"
      },
      {
        "id": "09124a92-c11f-4571-b35b-ab0bce6dd081",
        "name": "T1112"
      }
    ],
    "others": [
      {
        "id": "",
        "name": "Government"
      },
      {
        "id": "",
        "name": "Critical Infrastructure"
      }
    ]
  },
  "external_refs": [
    "https://assets.sentinelone.com/sentinellabs/chamelgang-friends-en",
    "https://otx.alienvault.com/pulse/667c50c56fd52a7b4ecd11f2"
  ]
}