Operation CamelClone Targets Governments with Sophisticated Espionage Tactics

Operation CamelClone is a sophisticated cyber espionage campaign targeting government agencies and defense institutions in Algeria, Mongolia, Ukraine, and Kuwait. The attackers use spear-phishing emails containing malicious ZIP files disguised as official correspondence to initiate a multi-stage infection process. This method allows them to exploit public file-sharing sites and tools like Rclone to deliver malware and extract sensitive data. The campaign is particularly focused on organizations linked to national security, making detection challenging for defenders. The operation's scope spans multiple countries, indicating a coordinated effort to undermine governmental cybersecurity. Current status remains active as investigations continue. No specific CVEs or numbers of affected systems were mentioned in the articles.

Key Points: • Operation CamelClone targets government and defense sectors in multiple countries. • Attackers use spear-phishing emails with malicious ZIP files for initial infection. • Public file-sharing services and tools like Rclone are exploited to evade detection.