APT41, also known by aliases such as Wicked Panda, Brass Typhoon, and BARIUM, is a Chinese cyber threat group that uniquely combines state-sponsored espionage with financially motivated cybercrime. Active since at least 2006, the group has demonstrated a consistent ability to evolve its tactics and toolset, frequently adapting to new vulnerabilities and operational environments. Unlike many state-backed groups, APT41 is distinguished by its dual mandate, often pursuing intellectual property and strategic intelligence while simultaneously engaging in activities like virtual currency manipulation and ransomware for personal gain. This dual operational model allows the group significant flexibility and resourcefulness, making it a persistent threat across a diverse range of global targets. The group also maintains a large arsenal of custom and publicly available malware, rapidly weaponizes zero-day vulnerabilities, and often utilizes supply chain compromises to gain initial access.

Aliases del actor

APT41AmoebaBARIUMBRONZE ATLASBRONZE EXPORTBlackflyBrass TyphoonDouble DragonEarth BakuG0044G0096GrayflyHOODOOLEADLeopard TyphoonRed KelpieTA415TG-2633WICKED PANDAWICKED SPIDERWinntiCRACKSHOT o PACMANincluyendo la explotación de vulnerabilidades en softwarela propagación de amenazas como el XmrigCROSSWALKSideWalklo que sugiere una amplia red de actividades maliciosas

Actores similares

SCATTERED SPIDERapt · 0Predator Pandaapt · 0Scattered Spideractor · 2apt-flaxtyphoonactor · 1apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1apt-redoctoberactor · 1predator-pandaactor · 1wicked-spideractor · 1