APT41__2019__blog_APT41.pdf

FireEye's report profiles APT41, a China-linked adversary that simultaneously conducts state-sponsored espionage and financially motivated cybercrime; it documents the group's targeting of healthcare, high-tech, telecoms, and the video game industry, describes over 46 malware families (including credential stealers, backdoors, bootkits, and attempted ransomware), and highlights sophisticated tactics such as supply-chain compromises, use of stolen digital certificates for signing, spear-phishing, lateral movement across Windows/Linux environments, and highly targeted malware delivery.