Threat actor
APT41
Tracked by CyberSIXT since Apr 13, 2026 · last activity Apr 13, 2026
Coverage timeline
-
APT41 uses Linux cloud backdoor to steal credentials via SMTPwww.darkreading.com · Apr 13, 2026
Tracked by CyberSIXT since Apr 13, 2026 · last activity Apr 13, 2026