Operation Crimson Palace: Sophos threat hunting unveils multiple clusters of Chinese state-sponsored activity targeting Southeast Asian government
Threat clusters targeted a government agency for cyberespionage in a campaign that had precursors dating back to early 2022. Written by Paul Jaramillo, Morgan Demboski, Mark Parsons JUNE 05, 2024 In May 2023, in a threat hunt across Sophos Managed Detection and Response telemetry, Sophos MDR’s Mark Parsons uncovered a complex, long-running Chinese state-sponsored cyberespionage operation we have dubbed “Crimson Palace” targeting a high-profile government organization in Southeast Asia. MDR launched the hunt […]
