APT Spotlight Series: APT41

APT41 (aka Wicked Panda and other aliases) is a prolific Chinese-linked threat actor that conducts both state-focused cyber-espionage and financially motivated criminal activity. The group has performed large-scale supply-chain and vulnerability exploitation campaigns (including Log4j and various Citrix/Zoho/Cisco flaws), targeted government and industry victims across many countries and sectors, and developed advanced implants such as the UEFI rootkit "MoonBounce"; several members were indicted by the US but remain at large, making APT41 a persistent, high-capability threat.