SugarGh0st RAT

SugarGh0st RAT is a Windows malware program (a customized variant of Gh0stRAT), utilized in cyberattacks since August 2023, first documented by Cisco Talos.[1][2][3][4] It was used to attack government agencies and the private sector,[5] in EMEA and Asia (cyberespionage, surveillance campaign and data theft).[6] In May 2024 it was reported an email phishing campaign (spotted first by Proofpoint) from threat actor SweetSpecter, using this malware, targeting US AI experts from government services, academia, US companies (for example, employees of OpenAI company), with the intention of obtaining non-public information.[7][8][9][10][11][12]

  1. ^ Chacko, Amal Jos. "SugarGh0st: China-linked espionage malware targets diplomatic circles". Interesting Engineering.
  2. ^ "SugarGh0st RAT Campaign Targets U.S. AI Experts". May 17, 2024.
  3. ^ "China-Linked Hackers Adopt Two-Stage Infection Tactic to Deploy Deuterbear RAT".
  4. ^ "US AI Experts Targeted in SugarGh0st RAT Campaign". www.darkreading.com.
  5. ^ "New RAT Malware SneakyChef & SugarGhost Attack Windows Systems". June 24, 2024.
  6. ^ "SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques". Cisco Talos Blog. June 21, 2024.
  7. ^ "U.S. AI Experts Targeted in SugarGh0st RAT Campaign - HS Today". www.hstoday.us. May 22, 2024.
  8. ^ "US AI experts targeted in cyberespionage campaign using SugarGh0st RAT". CSO Online.
  9. ^ Belanger, Ashley (October 10, 2024). "Using ChatGPT to make fake social media posts backfires on bad actors". Ars Technica.
  10. ^ Mascellino, Alessandro (May 16, 2024). "SugarGh0st RAT Variant Used in Targeted AI Industry Attacks". Infosecurity Magazine.
  11. ^ son, do (May 17, 2024). "SugarGh0st RAT Targets U.S. Artificial Intelligence Experts". Cybersecurity News.
  12. ^ "SugarGh0st RAT Used to Target American Artificial Intelligence Experts - Cyber Security Review". www.cybersecurity-review.com. 16 May 2024.