What other aliases and vendor names is APT41 known by?

APT41 is tracked across the cybersecurity industry by multiple aliases, including: Amoeba, BARIUM, Blackfly, Brass Typhoon, BRONZE ATLAS, BRONZE EXPORT, Chengdu 404 Network Technology, Double Dragon.

What vulnerabilities and CVEs does APT41 actively exploit?

APT41 has been observed weaponizing vulnerabilities including CVE-2019-19781, CVE-2020-10189, CVE-2021-44228.

APT41

Q: What are the primary motivations and sponsors of APT41?

APT41 operates from China with primary motivation categorized as Dual: State-sponsored intelligence gathering (espionage) and significant financial gain (cybercrime)., sponsored or affiliated with People's Republic of China.

ACTIVE CAMPAIGN TRACKED ⚠ Critical Threat China

Primary Aliases: Brass Typhoon Leopard Typhoon WICKED PANDA WICKED SPIDER

Sponsor / State Affiliation People's Republic of China

Primary Motivation Dual: State-sponsored intelligence gathering (espionage) and significant financial gain (cybercrime).

Active Timeline Unknown – Present

Confidence Rating 95% (Grounded)

Edge Infrastructure Exploitation, Software Supply Chain Integrity Attacks

⚔️ Weaponized CVE Matrix (3)

CVE-2019-19781

Citrix ADC Path Traversal

CVSS 9.8 KEV EPSS 96.4%

CVE-2020-10189

Weaponized Vulnerability

CVSS 8.5 KEV EPSS 85.0%

CVE-2021-44228

Log4Shell RCE

CVSS 10.0 KEV EPSS 97.5%

🎯 Target Sectors & Focus

Software Development Companies Telecommunications Healthcare and Pharmaceuticals Higher Education Government Agencies Gaming Industry Technology Providers