Would you spot APT41 coming in through a server nobody patched?
A threat group attributed to China, active since at least 2012, that mixes state espionage with crime for profit. It has hit healthcare, telecoms, technology and video games in at least 14 countries.
APT41
- Origin
- China · State-sponsored
- Also known as
- Wicked Panda, Brass Typhoon
- Lure
- Server exploits How they get in
- Weapon
- Backdoors Their signature move
- Loot
- Secrets What they are after
- MITRE ATT&CK®
- APT41 (G0096)
Try an exercise against this group
In an exercise against a group like this one, your team meets techniques like those documented for it, in the order a real attack would take. Afterwards the report shows where the attack was stopped.
Book a demo See all threat cards
The cards describe publicly known threat groups. They say nothing about who those groups target. © 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. MITRE ATT&CK® is a registered trademark of The MITRE Corporation.