China-Linked Hackers Camaro Dragon Use AI-Generated Content in Cyberattack on Qatar

China-linked hacking group Camaro Dragon has long conducted cyberespionage operations. Its latest campaign targeted Qatar using attack content disguised as news about conflicts in the Middle East. The incident shows that generative AI has moved beyond general-purpose scams and is increasingly being incorporated into targeted social engineering, making fake government messages more credible and increasing the risk of infiltration.

The latest disclosure shows that Camaro Dragon impersonated government sources using AI-generated content and lures tied to wars in the Middle East, tricking targets in Qatar into opening malicious files that delivered PlugX and Cobalt Strike. Reports have not disclosed the attack date, the number of affected organizations or the scale of any data leak, but have confirmed the use of at least two remote-access and penetration tools.