← All actors Recent activity

CHAMELGANG

CHAMELGANG · camofei

Indicators
64
Source reports
4
Activity span
not dated
Newest indicator
unknown
Upstream change
2026-01-02
20202023

Overview 64 indicators

No published description. This group is tracked by Maltrail from vendor reporting but is not named in MITRE ATT&CK, so there is no curated profile to show.

domain59CHAMELGANG-domain.txt
ipv42CHAMELGANG.json
url2CHAMELGANG.json
url_path1CHAMELGANG.json

Principal sources 4 reports

Ranked by how many of this actor's indicators each report brought in.

Timeline 64 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

  1. 9 domain3 yrs ago

    stairwell.com/news/chamelgang-and-chameldoh-a-dns-ove… · otx.alienvault.com/pulse/64907e470e46bba8d3b68d52

    ns1.marocfamily.com
    ns1.marocfamilym.com
    ns1.marocfamilyx.com
    ns1.spezialsex.com
    ns2.marocfamily.com
    ns2.spezialsex.com
    ns30.mayashopping.net
    ns31.mayashopping.net
    update.microsoft-support.net

  2. 49 domain, 2 ipv4, 2 url5 yrs ago

    ptsecurity.com/ww-en/analytics/pt-esc-threat-intellige… · stillu.cc/assets/slides/2023-08-Unmasking%20CamoF…

    domainapi.microsofed.com
    domainapp.centralgoogle.com
    domainapp.tstartel.org
    domainappupdate.ibmlotus.net
    domainauth.newtrendmicro.com
    domaincdn-chrome.com
    domaincentralgoogle.com
    domaincn.mcafee-service.us.com
    domaincollector.centralgoogle.com
    domaincontent.centralgoogle.com
    domaincontent.newtrendmicro.com
    domaincontents.newtrendmicro.com
    domainderbox.centralgoogle.com
    domaindocs.microsoft-support.net
    domaindownload.softupdate-online.top
    domaindownloads.softupdate-online.top
    domainen.mcafee-service.us.com
    domainfunding-exchange.org
    domainhelpdisk.ibmlotus.net
    domainibmlotus.net
    domaininternet.softupdate-online.top
    domainjumper.funding-exchange.org
    domainlogin.cdn-chrome.com
    domainmail.ibmlotus.net
    domainmail.tstartel.org
    domainmarket.newtrendmicro.com
    domainmcafee-service.us.com
    domainmcafee-upgrade.com
    domainmicrosofed.com
    domainmicrosoft-support.net
    domainnewtrendmicro.com
    domainonline.softupdate-online.top
    domainos.microsoft-support.net
    domainsearch.ibmlotus.net
    domainsnn1.mhysl.org
    domainsnn2.mhysl.org
    domainsnn3.mhysl.org
    domainsoftupdate-online.top
    domainssl.mcafee-upgrade.com
    domainstatic.mhysl.org
    domaintest.mcafee-upgrade.com
    domaintstartel.org
    domaintw.mcafee-upgrade.com
    domainupdate.kaspernsky.com
    domainupdate.softupdate-online.top
    domainupgrade.ibmlotus.net
    domainupgrade.newtrendmicro.com
    domainus.mcafee-upgrade.com
    domainwebmail.tstartel.org
    ipv4115.144.122.8:5555
    ipv445.91.24.73:8996
    urlhttp://42.99.116.14
    urlhttp://45.99.116.14

  3. 1 url_path5 yrs ago

    stairwell.com/news/chamelgang-and-chameldoh-a-dns-ove… · otx.alienvault.com/pulse/64907e470e46bba8d3b68d52

    /vuln6581362514513155613jboss

  4. 1 domain6 yrs ago

    ptsecurity.com/ww-en/analytics/pt-esc-threat-intellige… · stillu.cc/assets/slides/2023-08-Unmasking%20CamoF…

    kaspernsky.com

Further reading 4