SneakyChef espionage group targets government agencies with SugarGh0st and more infection techniques

Cisco Talos reports that the SneakyChef espionage actor is deploying SugarGh0st RAT in a multinational campaign against government agencies across EMEA and Asia, using decoy documents and SFX RAR delivery to drop a loader DLL and a VB script that implants SugarGh0st with C2 communication, with activity dating back to 2023 and probable Chinese-language operations.