APT Explorer

All actors

Chamelgang

Also reported as CamoFei and ChamelGang. Linked to China by one source.

Reports
8
Last reported
Known CVEs
4
Origin
China
ID
chamelgang
Sources
MISPETDAMalpedia
Merge evidence
4 alias matches

Reports per quarter

Dated reports, 2021 Q3 to 2024 Q2.

CVEs named in reports

KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.

Reports

  1. ChamelGang & Friends | Cyberespionage Groups Attacking Critical Infrastructure with Ransomware

    Malpedia library date ORKL

    Archived copy on ORKL Details

  2. PowerPoint 簡報

    Malpedia library date TeamT5 ORKL

    Archived copy on ORKL Details

  3. Unmasking CamoFei An In-depth Analysis of an Emerging APT Group Focused on Healthcare Sectors in East Asia

    date in the CCS '25 data Team T5 CCS '25 data

    Details

  4. Unmasking CamoFei

    file creation date ORKL

    Archived copy on ORKL Details

  5. Update to the REF2924 intrusion set and related campaigns

    date in the title ORKL

    The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Details

  6. Update to the REF2924 intrusion set and related campaigns

    Malpedia library date ORKL

    Archived copy on ORKL Details

  7. Masters of Mimicry: new APT group ChamelGang and its arsenal

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

  8. Masters of Mimicry: new APT group ChamelGang and its arsenal

    Malpedia library date ORKL

    The original link failed its last check. Original publisher Details

Newest first. Details opens the report in Explore.