Chinese hackers deploy SpiceRAT and SugarGh0st in global espionage campaign primarily targeting government entities across Asia, Europe, Middle East, and Africa

Archived link

• A previously undocumented Chinese-speaking threat actor codenamed SneakyChef has been linked to an espionage campaign primarily targeting government entities across Asia and EMEA (Europe, Middle East, and Africa) with SugarGh0st malware since at least August 2023.

• SneakyChef uses lures that are scanned documents of government agencies, most of which are related to various countries’ Ministries of Foreign Affairs or embassies, according to security analysts.