What other aliases and vendor names is Winnti Group known by?

Winnti Group is tracked across the cybersecurity industry by multiple aliases, including: APT41, Blackfly, G0044.

What are the primary motivations and sponsors of Winnti Group?

Winnti Group operates from Unknown with primary motivation categorized as Espionage / Financial, sponsored or affiliated with State-sponsored / Independent.

Winnti Group

▲ High Threat

Primary Aliases: APT41 Blackfly G0044

Sponsor / State Affiliation Independent / Not Attributed

Primary Motivation Espionage / Financial

Active Timeline Unknown – Present

Confidence Rating 80% (Grounded)

Winnti Group is a threat group with Chinese origins that has been active since at least 2010. The group has heavily targeted the gaming industry, but it has also expanded the scope of its targeting.(Citation: Kaspersky Winnti April 2013)(Citation: Kaspersky Winnti June 2015)(Citation: Novetta Winnti April 2015) Some reporting suggests a number of other groups, including Axiom, APT17, and Ke3chang, are closely linked to Winnti Group.(Citation: 401 TRG Winnti Umbrella May 2018)