DiscoverResearch SaturdayNew targets, new tools, same threat.
New targets, new tools, same threat.

New targets, new tools, same threat.

Update: 2024-10-19
Share

Description

This week we are joined by Chester Wisniewski, Global Field CTO from Sophos X-Ops team, to discuss their work on "Crimson Palace returns: New Tools, Tactics, and Targets." Sophos X-Ops has observed a resurgence in cyberespionage activity, tracked as Operation Crimson Palace, targeting Southeast Asian government organizations.

After a brief lull, Cluster Charlie resumed operations in September 2023, using new tactics such as web shells and open-source tools to bypass detection, re-establish access, and map target network infrastructure, demonstrating ongoing efforts to exfiltrate data and expand their foothold.

The research can be found here:

Learn more about your ad choices. Visit megaphone.fm/adchoices

Comments 
loading
Top Podcasts
The Best New Comedy Podcast Right Now – June 2024The Best News Podcast Right Now – June 2024The Best New Business Podcast Right Now – June 2024The Best New Sports Podcast Right Now – June 2024The Best New True Crime Podcast Right Now – June 2024The Best New Joe Rogan Experience Podcast Right Now – June 20The Best New Dan Bongino Show Podcast Right Now – June 20The Best New Mark Levin Podcast – June 2024
In Channel
LLM security 101.

LLM security 101.

2024-10-2618:35

New targets, new tools, same threat.

New targets, new tools, same threat.

2024-10-1927:17

Ransomware on repeat.

Ransomware on repeat.

2024-10-1228:35

Podcast bait, malware switch.

Podcast bait, malware switch.

2024-10-0522:44

Beyond the permissions wall.

Beyond the permissions wall.

2024-09-2817:47

Hook, line, and sinker.

Hook, line, and sinker.

2024-09-2119:46

Spamageddon: Xeon Sender’s cloudy SMS attack revealed!

Spamageddon: Xeon Sender’s cloudy SMS attack revealed!

2024-09-1418:57

The playbook for outpacing China.

The playbook for outpacing China.

2024-09-0727:26

Pop goes the developer.

Pop goes the developer.

2024-08-3119:03

MaaS infrastructure exposed.

MaaS infrastructure exposed.

2024-08-2425:39

Essential tools with critical security challenges.

Essential tools with critical security challenges.

2024-08-1724:17

Prompts gone rogue.

Prompts gone rogue.

2024-08-1022:42

Spinning the web of tangled tactics.

Spinning the web of tangled tactics.

2024-08-0324:49

The Black Basta ransomware riddle.

The Black Basta ransomware riddle.

2024-07-2719:04

Olympic scammers go for gold.

Olympic scammers go for gold.

2024-07-2020:08

On the prowl for mobile malware.

On the prowl for mobile malware.

2024-07-1327:18

APT36's cyber blitz on India.

APT36's cyber blitz on India.

2024-06-2917:29

Piercing the through the fog.

Piercing the through the fog.

2024-06-2216:07

Exploring the mechanics of Infostealer malware.

Exploring the mechanics of Infostealer malware.

2024-06-1526:09

Riding the hype for new Arc browser.

Riding the hype for new Arc browser.

2024-06-0825:06

loading
Google Play
Download from Google Play
Castbox
Download from App Store
usUnited States
00:00
00:00
1.0x

0.5x

0.8x

1.0x

1.25x

1.5x

2.0x

3.0x

Sleep Timer

Off

End of Episode

5 Minutes

10 Minutes

15 Minutes

30 Minutes

45 Minutes

60 Minutes

120 Minutes

New targets, new tools, same threat.

New targets, new tools, same threat.

N2K Networks