[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$ferUfZG8UgRvIl2TdALp3Jv28yGE4WDH1oP-F4i7aQDQ":3},{"success":4,"data":5},true,{"name":6,"slug":7,"aliases":8,"description":28,"country":29,"suspected_sponsor":30,"target_industries":31,"target_countries":48,"incident_types":65,"references":66,"techniques":99,"technique_count":241,"created_at":242,"seoMetadata":243,"schemaOrg":247},"APT41","apt41",[9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27],"G0096","TA415","Blackfly","Grayfly","LEAD","BARIUM","WICKED SPIDER","WICKED PANDA","BRONZE ATLAS","BRONZE EXPORT","Red Kelpie","G0044","Earth Baku","Amoeba","HOODOO","Brass Typhoon","Winnti","Double Dragon","TG-2633","APT41 is a prolific cyber threat group that carries out Chinese state-sponsored espionage activity in addition to financially motivated activity potentially outside of state control.","CN","People's Republic of China",[32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47],"Automotive","Business","Services","Cryptocurrency","Education","Energy","Financial","Healthcare","High-Tech","Intergovernmental","Media and Entertainment","Pharmaceuticals","Private sector","Retail","Telecommunications","Travel",[49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64],"China","France","Hong Kong","India","Italy","Japan","Myanmar","Netherlands","Singapore","South Korea","South Africa","Switzerland","Thailand","Turkey","United Kingdom","United States",[],[67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98],"https:\u002F\u002Fsecurelist.com\u002Fwinnti-faq-more-than-just-a-game\u002F57585\u002F","https:\u002F\u002Fsecurelist.com\u002Fwinnti-more-than-just-a-game\u002F37029\u002F","http:\u002F\u002Fwilliamshowalter.com\u002Fa-universal-windows-bootkit\u002F","https:\u002F\u002Fwww.microsoft.com\u002Fsecurity\u002Fblog\u002F2017\u002F01\u002F25\u002Fdetecting-threat-actors-in-recent-german-industrial-attacks-with-windows-defender-atp\u002F","https:\u002F\u002Fsecurelist.com\u002Fgames-are-over\u002F70991\u002F","https:\u002F\u002Fmedium.com\u002Fchronicle-blog\u002Fwinnti-more-than-just-windows-and-gates-e4f03436031a","https:\u002F\u002Fwww.dw.com\u002Fen\u002Fthyssenkrupp-victim-of-cyber-attack\u002Fa-36695341","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fteamviewer-confirms-undisclosed-breach-from-2016\u002F","https:\u002F\u002Fblog.trendmicro.com\u002Ftrendlabs-security-intelligence\u002Fwinnti-abuses-github\u002F","https:\u002F\u002Fwww.dw.com\u002Fen\u002Fbayer-points-finger-at-wicked-panda-in-cyberattack\u002Fa-48196004","https:\u002F\u002Fwww.welivesecurity.com\u002F2019\u002F03\u002F11\u002Fgaming-industry-scope-attackers-asia\u002F","https:\u002F\u002F401trg.com\u002Fburning-umbrella\u002F","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0044\u002F","https:\u002F\u002Fwww.crowdstrike.com\u002Fblog\u002Fmeet-crowdstrikes-adversary-of-the-month-for-july-wicked-spider\u002F","https:\u002F\u002Fwww.secureworks.com\u002Fresearch\u002Fthreat-profiles\u002Fbronze-atlas","https:\u002F\u002Fwww.secureworks.com\u002Fresearch\u002Fthreat-profiles\u002Fbronze-export","https:\u002F\u002Fwww.pwc.co.uk\u002Fcyber-security\u002Fassets\u002Fcyber-threats-2019-retrospect.pdf","https:\u002F\u002Fwww.justice.gov\u002Fopa\u002Fpr\u002Fseven-international-cyber-defendants-including-apt41-actors-charged-connection-computer","https:\u002F\u002Fassets.documentcloud.org\u002Fdocuments\u002F7210602\u002FFLASH-AC-000133-TT-Published.pdf","https:\u002F\u002Fwww.cfr.org\u002Fcyber-operations\u002Fwinnti-umbrella","https:\u002F\u002Fwww.fireeye.com\u002Fblog\u002Fthreat-research\u002F2019\u002F08\u002Fapt41-dual-espionage-and-cyber-crime-operation.html","https:\u002F\u002Funit42.paloaltonetworks.com\u002Fapt41-using-new-speculoos-backdoor-to-target-organizations-globally\u002F","https:\u002F\u002Fwww.mandiant.com\u002Fresources\u002Freport-apt41-double-dragon-a-dual-espionage-and-cyber-crime-operation","https:\u002F\u002Fwww.cfr.org\u002Fcyber-operations\u002Fapt-41","https:\u002F\u002Fattack.mitre.org\u002Fgroups\u002FG0096","https:\u002F\u002Fwww.uscc.gov\u002Fsites\u002Fdefault\u002Ffiles\u002F2022-02\u002FAdam_Kozy_Testimony.pdf","https:\u002F\u002Fwww.pwc.com\u002Fgx\u002Fen\u002Fissues\u002Fcybersecurity\u002Fcyber-threat-intelligence\u002Fcyber-year-in-retrospect\u002Fyir-cyber-threats-report-download.pdf","https:\u002F\u002Fwww.pwc.co.uk\u002Fcyber-security\u002Fpdf\u002Fpwc-cyber-threats-2020-a-year-in-retrospect.pdf","https:\u002F\u002Fwww.fireeye.com\u002Fcontent\u002Fdam\u002Ffireeye-www\u002Fsummit\u002Fcds-2019\u002Fpresentations\u002Fcds19-executive-s08-achievement-unlocked.pdf","https:\u002F\u002Fwww.welivesecurity.com\u002F2021\u002F03\u002F10\u002Fexchange-servers-under-siege-10-apt-groups\u002F","https:\u002F\u002Fservices.google.com\u002Ffh\u002Ffiles\u002Fblogs\u002Fgcat_threathorizons_full_apr2023.pdf","https:\u002F\u002Fwww.trendmicro.com\u002Fen_us\u002Fresearch\u002F24\u002Fd\u002Fearth-freybug.html",[100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146,147,148,149,150,151,152,153,154,155,156,157,158,159,160,161,162,163,164,165,166,167,168,169,170,171,172,173,174,175,176,177,178,179,180,181,182,183,184,185,186,187,188,189,190,191,192,193,194,195,196,197,198,199,200,201,202,203,204,205,206,207,208,209,210,211,212,213,214,215,216,217,218,219,220,221,222,223,224,225,226,227,228,229,230,231,232,233,234,235,236,237,238,239,240],"T1059","T1110","T1134","T1087","T1087.001","T1087.002","T1098","T1098.007","T1583","T1583.007","T1595","T1595.002","T1595.003","T1071","T1071.001","T1071.002","T1071.004","T1560","T1560.001","T1560.003","T1119","T1197","T1547","T1547.001","T1037","T1059.001","T1059.003","T1059.004","T1059.007","T1586","T1586.003","T1136","T1136.001","T1543","T1543.003","T1555","T1555.003","T1486","T1213","T1213.003","T1005","T1001","T1001.003","T1074","T1074.001","T1030","T1140","T1484","T1484.001","T1568","T1568.002","T1573","T1573.002","T1546","T1546.008","T1480","T1480.001","T1048","T1048.003","T1041","T1567","T1567.002","T1190","T1203","T1133","T1008","T1083","T1574","T1574.001","T1574.006","T1070","T1070.003","T1070.004","T1105","T1056","T1056.001","T1570","T1036","T1036.004","T1036.005","T1112","T1104","T1599","T1046","T1135","T1027","T1014","T1027.002","T1027.013","T1588","T1588.002","T1588.003","T1003","T1003.001","T1003.002","T1003.003","T1069","T1566","T1566.001","T1542","T1542.003","T1055","T1090","T1012","T1021","T1021.001","T1021.002","T1018","T1496","T1496.001","T1053","T1053.005","T1596","T1596.005","T1593","T1593.002","T1594","T1505","T1505.003","T1553","T1553.002","T1195","T1195.002","T1218","T1218.001","T1218.011","T1082","T1016","T1049","T1033","T1569","T1569.002","T1550","T1550.002","T1078","T1102","T1102.001","T1047","T1685","T1684.001","T1685.005",141,"2023-08-09T17:25:09.409843+00:00",{"title":244,"metaDescription":245,"keywords":246},"APT41 Threat Actor Profile | Precursor Intelligence","APT41 is a prolific cyber threat group that carries out Chinese state-sponsored espionage activity in addition to financially motivated activity poten...","APT41, G0096, TA415, Blackfly, Grayfly, LEAD, BARIUM, WICKED SPIDER, WICKED PANDA, BRONZE ATLAS, BRONZE EXPORT, Red Kelpie, G0044, Earth Baku, Amoeba, HOODOO, Brass Typhoon, Winnti, Double Dragon, TG-2633, threat actor, APT, cyber threat, threat intelligence, Automotive, Business, Services, People's Republic of China, CN",{"@context":248,"@type":249,"name":6,"alternateName":250,"description":28,"url":251,"mainEntityOfPage":252,"location":254},"https:\u002F\u002Fschema.org","Organization",[9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27],"http:\u002F\u002Flocalhost:3000\u002Fthreat-actors\u002Fapt41",{"@type":253,"@id":251},"WebPage",{"@type":255,"name":29},"Country"]