Chinese hackers use ransomware to hide their activities

Security firms report that the APT group ChamelGang hides its activities through ransomware. ChamelGang has deployed ransomware in dozens of cyberattacks, including using the ransomware CatB to attack the Indian medical institution AIIMS and the Brazilian presidential office in 2022. Security researchers believe this represents a disturbing trend: hackers use ransomware as the final stage of their cyber espionage operations to obtain financial gain, sabotage, distract, misattribute or delete evidence.

https://www.sentinelone.com/labs/chamelgang-attacking-critical-infrastructure-with-ransomware/