This week we are joined by Chester Wisniewski, Global Field CTO from Sophos X-Ops team, to discuss their work on "Crimson Palace returns: New Tools, Tactics, and Targets." Sophos X-Ops has observed a resurgence in cyberespionage activity, tracked as Operation Crimson Palace, targeting Southeast Asian government organizations.
After a brief lull, Cluster Charlie resumed operations in September 2023, using new tactics such as web shells and open-source tools to bypass detection, re-establish access, and map target network infrastructure, demonstrating ongoing efforts to exfiltrate data and expand their foothold.
The research can be found here:
Crimson Palace returns: New Tools, Tactics, and Targets
Learn more about your ad choices. Visit megaphone.fm/adchoices
New targets, new tools, same threat. [Research Saturday] | CyberWire Daily podcast - Listen or read transcript on Metacast
![New targets, new tools, same threat. [Research Saturday] - podcast episode cover](https://megaphone.imgix.net/podcasts/c694501a-8ccb-11ef-8afc-f3abb11a2f35/image/95b72a93c2ffaf8ff900d662a9bd3735.png?ixlib=rails-4.3.1&max-w=3000&max-h=3000&fit=crop&auto=format,compress)
