APT41
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
APT41 is a prolific cyber threat group that carries out Chinese state-sponsored espionage activity in addition to financially motivated activity potentially outside of state control.
Source-reported aliases: G0096, TA415, Blackfly, Grayfly, LEAD, BARIUM, WICKED SPIDER, WICKED PANDA, BRONZE ATLAS, BRONZE EXPORT, Red Kelpie, G0044, Earth Baku, Amoeba, HOODOO, Brass Typhoon, Winnti, Double Dragon, TG-2633, Leopard Typhoon, SPIRE CASTLE. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): 
China · 
France · 
Hong Kong · 
India · 
Italy · 
Japan · 
Myanmar · 
Netherlands · 
Singapore · 
South Korea · 
South Africa · 
Switzerland · 
Thailand · 
Türkiye · 
United Kingdom · 
United States of America
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://securelist.com/winnti-faq-more-than-just-a-game/57585/
https://securelist.com/winnti-more-than-just-a-game/37029/
https://securelist.com/games-are-over/70991/
https://medium.com/chronicle-blog/winnti-more-than-just-windows-and-gates-e4f03436031a
https://www.dw.com/en/thyssenkrupp-victim-of-cyber-attack/a-36695341
https://www.bleepingcomputer.com/news/security/teamviewer-confirms-undisclosed-breach-from-2016/
https://blog.trendmicro.com/trendlabs-security-intelligence/winnti-abuses-github/
https://www.dw.com/en/bayer-points-finger-at-wicked-panda-in-cyberattack/a-48196004
https://www.welivesecurity.com/2019/03/11/gaming-industry-scope-attackers-asia/
https://401trg.com/burning-umbrella/
https://attack.mitre.org/groups/G0044/
https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-july-wicked-spider/
https://www.secureworks.com/research/threat-profiles/bronze-atlas
https://www.secureworks.com/research/threat-profiles/bronze-export
https://www.pwc.co.uk/cyber-security/assets/cyber-threats-2019-retrospect.pdf