ChamelGang
ChamelGang is a China-attributed nation-state APT group with an espionage motive, tracked by Brandefense. It targets 3 sectors, including Government and Manufacturing, in 11 countries, including the United States and India.
- CamoFei
- Origin
- China
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jan 1, 2021
- Last seen
- Jan 1, 2023
- Record updated
Who They Target.
About ChamelGang.
ChamelGang, also known as CamoFei, is a threat actor first publicly documented during a Q2 2021 data-theft investigation at an energy company. The source identifies custom BeaconLoader in that activity and reports a suspected late-2022 CatB ransomware link to the All India Institute of Medical Sciences and the Presidency of Brazil. Public sources do not establish state sponsorship, a physical operating location, or a bounded campaign entity.
Last updated Sep 11, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.