Summary:
The May 2024 campaign, attributed to the cluster UNK_SweetSpecter, utilizes the SugarGh0st RAT, a remote access trojan customized from Gh0stRAT. Traditionally associated with Chinese-speaking threat actors, this variant has now been repurposed to target AI-related organizations.
