APT41G0096 state-contractor

About this actor

[APT41](https://attack.mitre.org/groups/G0096) is a threat group that researchers have assessed as Chinese state-sponsored espionage group that also conducts financially-motivated operations. Active since at least 2012, [APT41](https://attack.mitre.org/groups/G0096) has been observed targeting various industries, including but not limited to healthcare, telecom, technology, finance, education, retail and video game industries in 14 countries.(Citation: apt41_mandiant) Notable behaviors include using a wide range of malware and tools to complete mission objectives. [APT41](https://attack.mitre.org/groups/G0096) overlaps at least partially with public reporting on groups including BARIUM and [Winnti Group](https://attack.mitre.org/groups/G0044).(Citation: FireEye APT41 Aug 2019)(Citation: Group IB APT 41 June 2021)

Source: MITRE ATT&CK

Activity timeline

• 2021 — 1 CVE published
• 2017 — 1 CVE published

Profile

Mitigating controls (NIST 800-53)

Co-occurring actors

• Deep Panda 2 shared CVEs
• Leviathan 2 shared CVEs
• APT1 2 shared CVEs
• menuPass 2 shared CVEs
• Winnti Group 2 shared CVEs
• APT3 2 shared CVEs
• APT19 2 shared CVEs

Similar actors