The hacker group APT41 attacks companies in the areas of healthcare, telecommunications, fintech, media, and cryptocurrency exchanges. This activity is funded by the Chinese government, according to analysts specializing in cybersecurity company FireEye.

Below is the direct link to the ungated report. https://t.co/yVSNMC17xX

– FireEye (@FireEye) August 7, 2019

Experts believe that the victims of APT41 are industry participants, the development of which is a priority in the current Chinese five-year period.

APT41 attacks on various industries by year

At the same time, APT41 pursues its own goals, extracting financial benefits from attacks, which is unusual for other groups under the Chinese government, according to FireEye.

APT41 is known to include at least two people with the pseudonyms Chzan Xuiguan and Wolfji . The group probably has connections with other hacker organizations like BARIUM and Winnti.

FireEye also evaluated at what time of the day the APT41 attacked the gaming industry (its core target) and businesses from other areas. It turned out that this was happening outside the framework of a standard working day – probably these people, among other things, have the main job.

APT41 Schedule

Recall, according to the UN Security Council, hackers under the DPRK government stole about $ 2 billion from banking institutions and cryptocurrency exchanges.

Subscribe to BlockchainJournal news on Telegram: BlockchainJournal Feed – the entire news feed, BlockchainJournal – the most important news and polls.