APT41
threat actorCN01
also known as
Other names and identifiers for this entity.
ATT&CK
APT41 · BARIUM · Brass Typhoon · Wicked Panda
MISP
APT41 · Amoeba · BARIUM · BRONZE ATLAS · BRONZE EXPORT · Blackfly · Brass Typhoon · Double Dragon · Earth Baku · Grayfly · HOODOO · LEAD · Leopard Typhoon · Red Kelpie · SPIRE CASTLE · TA415 · TG-2633 · WICKED PANDA · WICKED SPIDER · Winnti
APT41 is a prolific cyber threat group that carries out Chinese state-sponsored espionage activity in addition to financially motivated activity potentially outside of state control.
02
resolved ATT&CK groups
Threat groups associated with this.
03
related actors
Related entries.
- APT17· very-likely
04
techniques used (82)
ATT&CK techniques this enables or maps to.
showing 20 of 82
05
campaigns (2)
Campaigns that use this.
06
software used (32)
Malware and tools associated with this.
07
references
External citations — patches, advisories, analysis.
- https://securelist.com/winnti-faq-more-than-just-a-game/57585/
- https://securelist.com/winnti-more-than-just-a-game/37029/
- http://williamshowalter.com/a-universal-windows-bootkit/
- https://www.microsoft.com/security/blog/2017/01/25/detecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp/
- https://securelist.com/games-are-over/70991/
- https://medium.com/chronicle-blog/winnti-more-than-just-windows-and-gates-e4f03436031a
- https://www.dw.com/en/thyssenkrupp-victim-of-cyber-attack/a-36695341
- https://www.bleepingcomputer.com/news/security/teamviewer-confirms-undisclosed-breach-from-2016/