G0096 APT41
EnterpriseMobilealso known asAPT41 · Wicked Panda · Brass Typhoon · BARIUM
APT41 is a threat group that researchers have assessed as Chinese state-sponsored espionage group that also conducts financially-motivated operations. Active since at least 2012, APT41 has been observed targeting various industries, including but not limited to healthcare, telecom, technology, finance, education, retail and video game industries in 14 countries. Notable behaviors include using a wide range of malware and tools to complete mission objectives. APT41 overlaps at least partially with public reporting on groups including BARIUM and Winnti Group.
canonical actor
The group this is attributed to.
techniques used (82)
ATT&CK techniques this enables or maps to.
software used (32)
Malware and tools associated with this.
campaigns (2)
Campaigns that use this.
source
Where this definition is published.