APT41

APT41 is a cyber threat group suspected of Chinese state-sponsored espionage and financially motivated activities. The group has targeted organizations in at least 14 countries since 2012, focusing on sectors such as healthcare, telecoms, high-tech, and the video game industry. APT41 employs spear-phishing emails with malicious attachments, such as compiled HTML files, to initiate attacks and uses a wide range of malware, including backdoors, credential stealers, and rootkits. The group has also deployed Master Boot Record (MBR) bootkits to maintain persistence on compromised systems.