APT41 Spinoff Expands Chinese Actor's Scope Beyond Asia

Trend Micro researchers report that Earth Baku, a spinoff of China-linked APT41, has expanded operations into Europe, the Middle East and Africa using modular backdoors (SneakCross), customized loaders (StealthVector), webshells (Godzilla), and living-off-the-land tools to achieve persistence, evade detection, and exfiltrate data; the report details observed tools, tactics, and recommendations for defenders.