SneakyChef Espionage Campaign Targeting Government Agencies with SugarGh0st RAT

SneakyChef is a suspected China-aligned cyber espionage group that conducted targeted operations against government and diplomatic organizations in the Middle East. The campaign relied on phishing emails containing malicious archives and Windows shortcut (LNK) files that ultimately deployed the SugarGh0st RAT. Once executed, the malware established communication with attacker-controlled infrastructure and provided remote access capabilities, enabling system reconnaissance, command execution, data collection, surveillance activities, and persistent access to compromised networks. The victim profile, targeting of government entities, and intelligence-gathering objectives suggest a state-sponsored espionage operation focused on acquiring sensitive governmental and diplomatic information. The campaign also demonstrated the group's use of evolving infection techniques designed to evade detection and maintain long-term access to targeted environments.