Connect with us

Telecom

Operation Crimson Palace: Chinese State-Sponsored Espionage, Expands in Southeast Asia – Sophos Report Finds

Published

on

Sophos logo
Kindly share this post

Sophos, a global leader of innovative security solutions for defeating cyberattacks, on Tuesday released its report, “Crimson Palace: New Tools, Tactics, Targets,” which details the latest developments in a nearly two-year long Chinese cyberespionage campaign in Southeast Asia.

Sophos logo

Sophos X-Ops first reported on what they named Operation Crimson Palace in June and detailed Sophos X-Ops’ discovery of three separate clusters of Chinese nation-state activity—Cluster Alpha, Cluster Bravo and Cluster Charlie—inside a high-profile government organization.

After a brief hiatus in August 2023, Sophos X-Ops noted renewed Cluster Bravo and Cluster Charlie activity, both within the initial targeted organization and in numerous other organizations within the region.

While investigating this renewed activity, Sophos X-Ops uncovered a novel keylogger that the threat hunters named “Tattletale,” which can impersonate users who have signed into the system and gather information related to password policies, security settings, cached passwords, browser information, and storage data. Sophos X-Ops also notes in the report that, in contrast to the first wave of the operation, Cluster Charlie increasingly switched to using open-source tools rather than deploying the types of custom malware they developed in the initial wave of activity.

“We’ve been in an ongoing chess match with these adversaries. During the initial phases of the operation, Cluster Charlie was deploying various bespoke tools and malware,” said Paul Jaramillo, director, threat hunting and threat intelligence, Sophos.

“However, we were able to ‘burn’ much of their previous infrastructure, blocking their Command and Control (C2) tools and forcing them to pivot.

“This is good; however, their switch to open-source tools demonstrates just how quickly these attacker groups can adapt and remain persistent. It also appears to be an emerging trend among Chinese nation-state groups.

“As the security community works to secure our most sensitive systems from these attackers, it’s important to share the insights into this pivot.”

Cluster Charlie, which shares tactics, techniques and procedures (TTPs) with the Chinese threat group Earth Longzhi, was originally active from March to August 2023 in a high-level government organization in Southeast Asia.

While the cluster was dormant for several weeks, it re-emerged in September 2023 and was active again until at least May 2024. During this second stage of the campaign, Cluster Charlie focused on penetrating deeper into the network, evading endpoint detection and response (EDR) tools and gathering further intelligence.

In addition to switching to open-source tools, Cluster Charlie also began using tactics initially deployed by Cluster Alpha and Cluster Bravo, suggesting that the same overarching organization is directing all three activity clusters.

Sophos X-Ops has tracked ongoing Cluster Charlie activity across multiple other organizations in Southeast Asia.

Cluster Bravo, which shares TTPs with the Chinese threat group Unfading Sea Haze, was originally only active in the targeted network for a three-week span in March 2023.

However, the cluster reappeared in January 2024, only this time it was targeting at least 11 other organizations and agencies in the same region.

“Not only are we seeing all three of the ‘Crimson Palace’ clusters refine and coordinate their tactics, but they’re also expanding their operations, attempting to infiltrate other targets in Southeast Asia.

“Given how frequently Chinese nation-state groups share infrastructure and tools, and the fact that Cluster Bravo and Cluster Charlie are moving beyond the original target, we will likely continue to see this campaign evolve—and in potentially new locations. We will be monitoring it closely,” said Jaramillo.

To learn more, read “Crimson Palace: New Tools, Tactics, Targets” on Sophos.com. For details about Sophos’ threat hunting and other services for disrupting cyberattacks, go to Sophos Managed Detection and Response (MDR).

For an in-depth look at the threat hunting behind this nearly two-year long cyber espionage campaign, register for the upcoming webinar “Intrigue of the Hunt: Operation Crimson Palace: Unveiling a Multi-Headed State-Sponsored Campaign” on Sept. 24 at 2 PM ET: https://events.sophos.com/operation-crimson-palace/.


Kindly share this post

Ugo Onwuaso is an ICT enthusiast. He believes technology should be used for general good. He holds a Master of Public Administration (MPA) degree from the Lagos state University. Dear Reader, Your support matters. But we believe that technology makes life more exciting and helps improve the lives of people around Nigeria and indeed the world. That is why, we have devoted our energy to independent reportage of technology and finance and how they affect lives. Our incisive and analytical view of how technology news affects the daily life help individuals and organizations make up their minds. Quality journalism costs money. Today, we're asking that you support us to do more. Kindly support our effort to deliver technology and finance journalism to everyone in the world. Donate as little as N1,000. Bank transfers can be made to: UBA Plc 1017156876 Communication Week Media Ltd

Telecom

MTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star

Published

on

L-R: Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria; Ayodeji Benson, Winner, Next Afrobeats Star Reality Show (Season 1) and Emamoke Ogoro, General Manager, Brand and Communication, MTN Nigeria, at the grand finale of the Next Afrobeats Star Reality Show (Season 1), held at the Ultima Studios, Lekki, Lagos on Saturday, December 13, 2025.
Kindly share this post

MTN Nigeria, in collaboration with ONErpm and Ultima Studios, has announced Ayodeji Benson, popularly known as Ayo Benzi, as the winner of the maiden edition of the Next Afrobeats Star reality show.

MTN Nigeria Crowns Ayo Benzi Winner of Next Afrobeats Star

L-R: Onyinye Ikenna-Emeka, Chief Marketing Officer, MTN Nigeria; Ayodeji Benson, Winner, Next Afrobeats Star Reality Show (Season 1) and Emamoke Ogoro, General Manager, Brand and Communication, MTN Nigeria, at the grand finale of the Next Afrobeats Star Reality Show (Season 1), held at the Ultima Studios, Lekki, Lagos on Saturday, December 13, 2025.

The grand finale, held on Sunday night at Ultima Studios in Lekki, Lagos, marked the climax of a nationwide talent search that began in September with over 15,000 aspiring musicians.

After weeks of auditions, mentorship, and rigorous training, five finalists – Ayo Benzi, Dave Cash, Kaeko, Somto O’Laker, and Lucky Yay – battled for the top prize in a high-energy showcase of performance and artistry.

At the end of the electrifying contest, Ayo Benzi emerged victorious, securing a ₦150 million music deal. Dave Cash was named first runner-up with ₦100 million, while Kaeko, Somto O’Laker, and Lucky Yay received ₦75 million, ₦50 million, and ₦25 million respectively.

Throughout the season, contestants were mentored by leading Afrobeats producers Sarz, Puffy Tee, P Prime, and Andre Vibez. Benzi, who was part of Puffy Tee’s team, credited the mentorship programme for sharpening his craft and stage presence.

Speaking at the event, Onyinye Ikenna-Emeka, Chief Marketing Officer of MTN Nigeria, said the initiative reflects the company’s commitment to youth empowerment and cultural expression.

“The Next Afrobeats Star platform is about creating real opportunities for young Nigerians and giving their talent the structure, visibility, and support it deserves.

“Afrobeats continues to place Nigeria on the global cultural map, and MTN is proud to be enabling the next generation of artists who will take this sound even further,” she said.

She added that the finale was not just a competition but a celebration of growth and readiness for the global stage.

In his acceptance speech, Ayo Benzi described the victory as a defining moment in his career.

“A big thank you to MTN. From the audition days, the treatment MTN has given us has been amazing. God bless the brand,” he said.

The finale also featured guest performances by Afrobeats stars Iyanya and Bella Shmurda, adding glamour to the night and reinforcing the show’s connection to the wider music ecosystem.

With the successful conclusion of the season, MTN Nigeria and its partners reaffirmed their role in championing youth ambition, supporting creative industries, and shaping the future of Nigerian music through platforms that turn potential into opportunity.


Kindly share this post
Continue Reading

Telecom

T2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs

Published

on

Kindly share this post

T2, formerly known as 9mobile, is under investigation by the Nigerian Communications Commission (NCC) in Benue State for an undisclosed incident disrupting USSD, SMS, voice, and data services across nine local government areas.

T2 Faces NCC Probe in Benue Over Major Service Outage in 9 LGAs

T2

The affected areas include Ado, Agatu, Gwer East, Gwer West, Konshisha, Obi, Ohimini, Okpokwu, and Otukpo, as detailed in an advisory on the NCC Major Outages Portal, which tracks significant disruptions reported by Mobile Network Operators (MNOs) and Internet Service Providers (ISPs).

Neither T2 nor its public relations firm, Chain Reactions, has responded to inquiries on the outage’s cause or restoration efforts as of this report.

The NCC’s continued reference to the operator as 9mobile, months after its public rebranding to T2 in August 2025, has sparked questions about whether the name change was formally notified to the regulator.

This probe aligns with NCC mandates requiring operators to disclose major outages, their impacts, and timelines for fixes, with compensation obligatory for disruptions exceeding 24 hours under the Consumer Code of Practice Regulations.

Industry watchers note that such incidents, often linked to fibre cuts, power failures, or infrastructure faults, underscore ongoing challenges in Nigeria’s telecoms sector, particularly amid T2’s subscriber losses post-rebrand. NCC vows transparency via its portal to hold operators accountable and protect consumers.


Kindly share this post
Continue Reading

Telecom

NCC Unveils Draft 5-Year Spectrum Roadmap, 60 GHz License-Exempt Guidelines to Boost Broadband, Innovation

Published

on

Kindly share this post

Nigerian Communications Commission (NCC) has unveiled two pivotal regulatory draft documents aimed at reshaping Nigeria’s communications sector over the next five years and fast-tracking deployment of ultra-high-speed wireless technologies.

NCC Unveils Draft 5-Year Spectrum Roadmap, 60 GHz License-Exempt Guidelines to Boost Broadband, Innovation

NCC

In a public notice dated December 19, 2025, and issued pursuant to its mandate under the Nigerian Communications Act (NCA) 2003, the Commission published the Draft 5-Year Spectrum Roadmap for the Communications Sector (2025–2030) and Draft Guidelines for the Use of the 60 GHz License-Exempt Band for Multi-Gigabit Wireless Systems.

Both documents are accessible on the NCC website for stakeholder review, with the roadmap outlining strategic spectrum planning, allocation, and management to optimise utilisation, support emerging technologies like 5G and IoT, expand broadband access, and align with global best practices.

The Spectrum Roadmap emphasises four core pillars: bridging the digital divide through low-band spectrum and satellite services, attracting investments via flexible licensing models, enhancing service quality with mid-band optimisation, and fostering innovation in areas such as direct-to-device connectivity and secondary spectrum trading.

It sets ambitious targets including universal 4G coverage nationwide, 50 per cent 5G penetration in state capitals, and average broadband speeds of 100 Mbps by 2030, while addressing rising data demand through band refarming and efficient management.

Complementing this, the 60 GHz Guidelines establish a license-exempt framework for the 57–66 GHz band, enabling multi-gigabit speeds up to 10 Gbps for short-range applications like WiGig, fixed wireless access, enterprise connectivity, urban broadband, and backhaul solutions.

The rules mandate NCC type approval for equipment, site registration for outdoor use, and interference mitigation measures, while prohibiting wide-area networks to safeguard primary users.

In line with Section 58 of the NCA 2003, NCC invites comments from industry operators, equipment manufacturers, consumer groups, and the public, with submissions due by Friday, January 16, 2025, via email to [email protected], [email protected], and [email protected].

The notice, signed by Mrs Nnenna Ukoha, Head of Public Affairs, stresses that stakeholder inputs will refine the frameworks to drive innovation, investment, competition, and sustainable growth in Nigeria’s telecoms ecosystem.


Kindly share this post
Continue Reading

Trending