Crimson Palace

A Sophos name for a coordinated Chinese state-sponsored cyber-espionage operation, not one discrete actor. Three clusters maintained long-term access to Southeast Asian government networks, using extensive DLL side-loading and custom malware to collect political, military, and technical intelligence.