The Hacker Newsinfo@thehackernews.com (The Hacker News)
China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations
According to The House Select Committee on China, an advisory warning has been issued about an ongoing series of highly targeted cyber espionage campaigns linked to the PRC amid US–China trade talks. The committee says these campaigns aim to compromise organisations and individuals involved in US trade policy and diplomacy, including US government agencies, business organisations, DC law firms and think tanks, and at least one foreign government.
It notes that threat actors impersonated Republican Congressman John Robert Moolenaar in phishing emails designed to trick recipients into opening files and links that would grant unauthorised access to systems. The end goal, the committee adds, is to steal valuable data by abusing software and cloud services to cover their tracks, a tactic associated with state‑sponsored hackers. The attack is attributed as the work of APT41, a group known for its cyber espionage across diverse sectors and geographies.
Story timeline APT41
Full timelineShow as table
| Published (UTC) | Outlet | Headline |
|---|---|---|
| Wed 10 Sep 2025 · 10:30 UTC | The Hacker News | China-Linked APT41 Hackers Target U.S. Trade Officials Amid 2025 Negotiations (this article) |
| Thu 22 Oct · 11:41 UTC | SecurityOnline | APT41 Uses a BlackX UEFI Bootkit to Bypass Secure Boot in Central Asia |
| Fri 23 Oct · 19:48 UTC | The Hacker News | BlackX Bootkit Bypasses Secure Boot in Central Asian Attacks |