APT41

Reported Context (10)

Presented as a China-aligned threat actor profile relevant to the sector, with IP theft and supply-chain objectives; the report does not claim confirmed activity against India/SAARC manufacturing during the reporting period. CYFIRMA Report Warns of Ransomware and Supply-Chain Risks for South Asian Manufacturing
Listed as a China-aligned nation-state espionage group targeting India's Government and Defence ecosystem. CYFIRMA Report: Persistent Espionage and Identity Attacks Target India’s Government and Defence Sector
Previously used name mapped to the new name SPIRE CASTLE. Google Threat Intelligence Group Introduces Unified Threat Actor Naming System
Named as an example of an advanced persistent threat group. How External Threat Intelligence Can Help Track APT Activity
Chinese actor reported to have used Gemini for C++ and Golang development, support for the OSSTUN command-and-control framework, and code obfuscation. Report: AI Is Scaling Adversary Operations and Compressing Attack Timelines

CVE (7)

Malware (28)

People (5)

Threat Actors (124)

MITRE ATT&CK (30)

Vendors (19)

Products (34)

Tools (28)

Industries (22)

Countries (33)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.