Connect with us

Telecom

Operation Crimson Palace: Chinese State-Sponsored Espionage, Expands in Southeast Asia – Sophos Report Finds

Published

on

Sophos logo
Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, on Tuesday released its report, “Crimson Palace: New Tools, Tactics, Targets,” which details the latest developments in a nearly two-year long Chinese cyberespionage campaign in Southeast Asia.

Sophos logo

Sophos X-Ops first reported on what they named Operation Crimson Palace in June and detailed Sophos X-Ops’ discovery of three separate clusters of Chinese nation-state activity—Cluster Alpha, Cluster Bravo and Cluster Charlie—inside a high-profile government organization.

After a brief hiatus in August 2023, Sophos X-Ops noted renewed Cluster Bravo and Cluster Charlie activity, both within the initial targeted organization and in numerous other organizations within the region.

While investigating this renewed activity, Sophos X-Ops uncovered a novel keylogger that the threat hunters named “Tattletale,” which can impersonate users who have signed into the system and gather information related to password policies, security settings, cached passwords, browser information, and storage data. Sophos X-Ops also notes in the report that, in contrast to the first wave of the operation, Cluster Charlie increasingly switched to using open-source tools rather than deploying the types of custom malware they developed in the initial wave of activity.

“We’ve been in an ongoing chess match with these adversaries. During the initial phases of the operation, Cluster Charlie was deploying various bespoke tools and malware,” said Paul Jaramillo, director, threat hunting and threat intelligence, Sophos.

Advertisement

“However, we were able to ‘burn’ much of their previous infrastructure, blocking their Command and Control (C2) tools and forcing them to pivot.

“This is good; however, their switch to open-source tools demonstrates just how quickly these attacker groups can adapt and remain persistent. It also appears to be an emerging trend among Chinese nation-state groups.

“As the security community works to secure our most sensitive systems from these attackers, it’s important to share the insights into this pivot.”

Cluster Charlie, which shares tactics, techniques and procedures (TTPs) with the Chinese threat group Earth Longzhi, was originally active from March to August 2023 in a high-level government organization in Southeast Asia.

While the cluster was dormant for several weeks, it re-emerged in September 2023 and was active again until at least May 2024. During this second stage of the campaign, Cluster Charlie focused on penetrating deeper into the network, evading endpoint detection and response (EDR) tools and gathering further intelligence.

Advertisement

In addition to switching to open-source tools, Cluster Charlie also began using tactics initially deployed by Cluster Alpha and Cluster Bravo, suggesting that the same overarching organization is directing all three activity clusters.

Sophos X-Ops has tracked ongoing Cluster Charlie activity across multiple other organizations in Southeast Asia.

Cluster Bravo, which shares TTPs with the Chinese threat group Unfading Sea Haze, was originally only active in the targeted network for a three-week span in March 2023.

However, the cluster reappeared in January 2024, only this time it was targeting at least 11 other organizations and agencies in the same region.

“Not only are we seeing all three of the ‘Crimson Palace’ clusters refine and coordinate their tactics, but they’re also expanding their operations, attempting to infiltrate other targets in Southeast Asia.

Advertisement

“Given how frequently Chinese nation-state groups share infrastructure and tools, and the fact that Cluster Bravo and Cluster Charlie are moving beyond the original target, we will likely continue to see this campaign evolve—and in potentially new locations. We will be monitoring it closely,” said Jaramillo.

To learn more, read “Crimson Palace: New Tools, Tactics, Targets” on Sophos.com. For details about Sophos’ threat hunting and other services for disrupting cyberattacks, go to Sophos Managed Detection and Response (MDR).

For an in-depth look at the threat hunting behind this nearly two-year long cyber espionage campaign, register for the upcoming webinar “Intrigue of the Hunt: Operation Crimson Palace: Unveiling a Multi-Headed State-Sponsored Campaign” on Sept. 24 at 2 PM ET: https://events.sophos.com/operation-crimson-palace/.

Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

Samsung Cuts Hundreds of U.S. Jobs as Consumer Electronics Business Moves to Texas

Published

on

Kindly share this post

Samsung Electronics has laid off hundreds of employees in its United States consumer electronics business as part of a headquarters relocation from New Jersey to Texas, amid mounting pressure on its mobile and home appliance divisions.

Samsung Cuts Hundreds of U.S. Jobs as Consumer Electronics Business Moves to Texas

The South Korean technology giant said Samsung Electronics America (SEA) would relocate its headquarters to Texas, a move affecting 739 positions in Englewood Cliffs, New Jersey.

The company said most affected employees had been offered relocation packages, while others were laid off.

In Plano, Texas, about 100 employees, including workers in Samsung’s mobile division, were also dismissed, according to a source familiar with the development.

Samsung said the relocation could lead to workforce changes involving employees unable to relocate and the restructuring of certain functions to align with business priorities.

Advertisement

Documents cited by Reuters indicated that affected employees were informed on June 30 of an enterprise-wide workforce reduction that would have a significant impact on staff.

Several employees also disclosed their departures through posts on LinkedIn, including senior sales and marketing executives based in Texas and New Jersey.

The layoffs come despite Samsung’s semiconductor division recording strong growth driven by rising global demand for artificial intelligence (AI) chips.

The company recently projected a 19-fold increase in second-quarter profit, supported by booming AI-related chip sales, and announced plans to invest hundreds of billions of dollars in expanding chip manufacturing.

However, Samsung’s consumer electronics business continues to struggle with higher semiconductor costs and increasing competition.

Advertisement

Its mobile division is expected to record its first-ever operating loss as it faces stiff competition from Apple, while Chinese brands, including TCL and Hisense, continue to gain market share in the television and home appliance segments.

Industry observers say the contrasting performance highlights Samsung’s growing reliance on its semiconductor business as consumer electronics revenues weaken.

Samsung denied reports of a broader global restructuring, insisting there was no company-wide overhaul of its consumer products division.

According to the company, relocating its U.S. headquarters is intended to improve collaboration and strengthen operations within Texas’ expanding technology and AI ecosystem.

Texas has increasingly attracted major technology companies due to its lower taxes and business-friendly environment, with firms such as Tesla and Oracle also relocating significant operations to the state.

Advertisement

Samsung already operates semiconductor manufacturing facilities in Texas, alongside its mobile operations hub in Plano.

As of the end of 2025, Samsung Electronics employed about 11,770 workers across the United States, including staff in its semiconductor business.

Meanwhile, Samsung SDS America, the company’s IT services affiliate, has also notified authorities that 179 positions could be affected by the relocation of its North American headquarters, although Samsung said the move was unrelated to layoffs or corporate restructuring.

Kindly share this post
Continue Reading

Telecom

NCC Urges African Unity Ahead of ITU 2026 Conference, Calls for Stronger Telecom Collaboration

Published

on

Kindly share this post

Nigerian Communications Commission has urged African countries to adopt a unified and technically coordinated position ahead of the 2026 International Telecommunication Union Conference, saying stronger regional collaboration is essential for the continent to influence global telecommunications and digital economy policies.

The Executive Vice-Chairman of the NCC, Dr Aminu Maida, made the call on Monday in Abuja while declaring open the African Telecommunications Union Conference Preparatory Committee meeting.

Maida said Africa must strengthen cooperation to shape global telecommunications and digital economy policies, noting that the two-day meeting was expected to produce greater continental alignment ahead of ITU 2026, establish practical collaboration mechanisms between conferences and sustain Africa’s technical participation in ITU processes.

“Preparation is not a procedural step; it is the place where coherence is built,” he said. “Africa must prepare together, work together and arrive at global forums with solutions that are both coherent and technically compliant.”

He said the committee would review the ATU’s activities between 2023 and 2026 and prepare agenda items, resolutions, decisions and recommendations for the 18th Conference of the Union.

Advertisement

According to him, while the forthcoming ATU conference will determine the direction of the continental body, the ITU conference will shape global telecommunications leadership and priorities.

Maida stressed that Africa’s influence at international forums would depend less on the size of its delegations than on the quality of its preparation, the coherence of its positions and consistency in advancing them.

He identified spectrum management, artificial intelligence governance, data protection, universal access, cybersecurity and digital infrastructure development as priority areas requiring stronger collaboration among African countries.

“No administration can address these challenges effectively in isolation. Our regulatory cooperation must therefore become more continuous, more technical and more institutionalised,” he said.

The NCC boss also called for greater support for African experts to participate actively in technical discussions where international standards and frameworks are developed.

Advertisement

“Our objective in Africa is not to resist global standards. It is to help shape standards that are globally sound and sufficiently informed by African realities,” he added.

He commended the leadership of the African Telecommunications Union for strengthening the coordination of Africa’s positions at the ITU and other international platforms.

Maida reaffirmed Nigeria’s commitment to supporting the ITU process through technical expertise, regulatory experience sharing and peer learning among African administrations.

Earlier, the Permanent Secretary of the Federal Ministry of Communications, Innovation and Digital Economy, Nadungu Gagare, described the meeting as critical to advancing Africa’s digital transformation agenda.

He said the committee’s recommendations would provide the foundation for decisions at the forthcoming ATU Conference of Plenipotentiaries and expressed confidence that the deliberations would strengthen the union’s capacity to promote inclusive and sustainable digital development across the continent.

Advertisement

“As we navigate an era of rapid technological advancement and digital innovation, the importance of collaboration among member states has never been greater,” Gagare said.

Also speaking, the Secretary-General of the ATU, John Omo, said the Conference Preparatory Committee plays a vital role in processing documents and proposals ahead of the main conference to enable member states to adopt common positions.

Omo disclosed that the union’s membership had increased from 49 to 52 countries, while associate membership had risen from 50 to 56, with 18 African academic institutions now participating in its activities.

He said the ATU had recorded progress in broadband development, satellite communications, spectrum coordination, internet governance, rural broadband, standardisation and digital infrastructure resilience.

However, he expressed concern over irregular financial contributions by some member states, warning that predictable funding remained essential for implementing the union’s programmes effectively.

Advertisement

Omo added that the forthcoming conference would elect members of the Administrative Council and a Secretary-General for the 2027–2031 tenure.

He commended the Federal Government, the NCC and the Ministry of Communications, Innovation and Digital Economy for hosting the preparatory meeting, which brought together representatives of African countries, academia, sector members and development partners to discuss the continent’s telecommunications and digital future.

Kindly share this post
Continue Reading

News

NITDA Communications Director Hadiza Umar Named in 2026 PR Power List, Graces Glazia Magazine Cover

Published

on

Kindly share this post

Mrs. Hadiza Umar, Director of the Corporate Communications and Media Relations Department at the National Information Technology Development Agency (NITDA), has been officially recognised as one of Nigeria’s top public relations professionals in the prestigious 2026 PR Power List.

NITDA Communications Director Hadiza Umar Named in 2026 PR Power List, Graces Glazia Magazine Cover

The definitive annual list, compiled by GLG Communications in partnership with The Guardian, was unveiled to commemorate World PR Day.

It celebrates 50 outstanding professionals within Nigeria and the diaspora whose strategic communication strategies have significantly shaped organisations, influenced public discourse, and advanced the profession over the past 12 months.

Adding to the momentous milestone, Mrs. Umar was hit with a major surprise at the exclusive PR Power List Soirée and Awards ceremony held at the Alliance Française in Ikoyi, Lagos, where she was unveiled as a front-cover personality for the Glazia Magazine PR Power List Special Issue.

The double recognition highlights her exceptional distinction and impact in public sector communications and narrative management.

Advertisement

Speaking on the dual achievement, Mrs. Umar expressed profound gratitude for the honours, describing the magazine cover appearance as a breathtaking surprise.

“I am deeply humbled and honored to be recognized on the 2026 PR Power List and to feature on the cover of Glazia Magazine alongside other exceptional industry titans,” Umar said.

“This milestone is a testament to the enabling environment and visionary leadership of the Director General of NITDA, Kashifu Inuwa Abdullahi, CCIE, which has allowed us to strategically drive the narrative of Nigeria’s digital economy and technological innovation.”

Mrs. Umar, a highly respected corporate communications strategist, holds professional fellowships in the Nigerian Institute of Public Relations (Chartered), the African Public Relations Association (APRA), and the Institute of Corporate Administration (CICA).

Under her supervisory role, NITDA’s media relations have consistently projected national information technology frameworks, start-up support frameworks, and digital literacy initiatives, to position Nigeria competitively on the global stage.

Advertisement

The 2026 PR Power List selection process involved a rigorous, independent evaluation led by a distinguished international jury.

The organisers noted that the class of 2026 represents professionals raising the standard of strategic communications and introducing new ideas to the industry.

Kindly share this post
Continue Reading

Trending