APT41

China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malwareChina-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware

China-linked APT41 used Google Calendar as C2 to control its TOUGHPROGRESS malware

Google says China-linked group APT41 controlled malware via Google Calendar to target governments through a hacked site. Google warns that…

17 hours ago
China-linked APT41 breached Taiwanese research institute <gwmw style="display:none;"></gwmw>China-linked APT41 breached Taiwanese research institute <gwmw style="display:none;"></gwmw>

China-linked APT41 breached Taiwanese research institute <gwmw style="display:none;"></gwmw>

China-linked group APT41 breached a Taiwanese government-affiliated research institute using ShadowPad and Cobalt Strike. Cisco Talos researchers reported that the…

10 months ago
Hacking firm I-Soon data leak revealed Chinese gov hacking capabilitiesHacking firm I-Soon data leak revealed Chinese gov hacking capabilities

Hacking firm I-Soon data leak revealed Chinese gov hacking capabilities

Recently the leak of a collection of files apparently stolen from the Chinese government hacking contractor, I-Soon, exposed Chinese hacking…

1 year ago
Experts attribute WyrmSpy and DragonEgg spyware to the Chinese APT41 groupExperts attribute WyrmSpy and DragonEgg spyware to the Chinese APT41 group

Experts attribute WyrmSpy and DragonEgg spyware to the Chinese APT41 group

China-linked group APT41 was spotted using two previously undocumented Android spyware called WyrmSpy and DragonEgg China-linked APT group APT41 has…

2 years ago
China-linked APT41 group spotted using open-source red teaming tool GC2China-linked APT41 group spotted using open-source red teaming tool GC2

China-linked APT41 group spotted using open-source red teaming tool GC2

China-linked APT41 group used the open-source red teaming tool GC2 in an attack against a Taiwanese media organization. Google Threat…

2 years ago
Previously undetected Earth Longzhi APT group is a subgroup of APT41Previously undetected Earth Longzhi APT group is a subgroup of APT41

Previously undetected Earth Longzhi APT group is a subgroup of APT41

Trend Micro reported that the Earth Longzhi group, a previously undocumented subgroup of APT41, targets Ukraine and Asian Countries. Early this…

3 years ago
China-linked APT41 group targets Hong Kong with Spyder LoaderChina-linked APT41 group targets Hong Kong with Spyder Loader

China-linked APT41 group targets Hong Kong with Spyder Loader

China-linked threat actors APT41 (a.k.a. Winnti) targeted organizations in Hong Kong, in some cases remaining undetected for a year. Symantec…

3 years ago
MoonBounce UEFI implant spotted in a targeted APT41 attackMoonBounce UEFI implant spotted in a targeted APT41 attack

MoonBounce UEFI implant spotted in a targeted APT41 attack

Researchers have spotted China-linked APT41 cyberespionage group using a UEFI implant, dubbed MoonBounce, to maintain persistence. Kaspersky researchers spotted the…

3 years ago
Alleged China-linked APT41 group targets Indian critical infrastructuresAlleged China-linked APT41 group targets Indian critical infrastructures

Alleged China-linked APT41 group targets Indian critical infrastructures

Recorded Future researchers uncovered a campaign conducted by Chinese APT41 group targeting critical infrastructure in India. Security researchers at Recorded…

4 years ago
Winnti APT continues to target game developers in Russia and abroadWinnti APT continues to target game developers in Russia and abroad

Winnti APT continues to target game developers in Russia and abroad

A Chinese Threat actor targeted organizations in Russia and Hong Kong with a previously undocumented backdoor, experts warn. Cybersecurity researchers…

4 years ago