Back Gbhackers

CamelClone Uses Public File

Gbhackers •Mayura Kathir • March 16, 2026

A new cyber espionage campaign dubbed Operation CamelClone, targeting government and strategic sectors across several geopolitically significant regions. The campaign abuses legitimate tools and public file‑sharing platforms to deliver malware and steal sensitive data, making it harder for defenders to detect. The operation primarily targets organizations linked to government and national security interests. Industries affected […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Operation CamelClone Targets Governments with Sophisticated Espionage Tactics Operation CamelClone is a sophisticated cyber espionage campaign targeting government agencies and defense institutions in Algeria, Mongolia, Ukraine, and Kuwait. The attackers use spear-phishing emails containing malicious ZIP files disguised as official correspondence to initiate a multi-stage infection process. This method allows them to exploit public file-sharing sites and tools like Rclone to deliver malware and extract sensitive data. The campaign is particularly focused on organizations linked to national security, making detection challenging for defenders. The operation's scope spans multiple countries, indicating a coordinated effort to undermine governmental cybersecurity. Current status remains active as investigations continue. No specific CVEs or numbers of affected systems were mentioned in the articles. 2 sources 73

Extracted Entities

CamelClone Uses Public File

The full story

Extracted Entities

Attack Types (2)

Campaigns (1)

Industries (1)