APT41 Hackers Exploiting Atexec and WmiExec Windows Modules for Malware Deployment

APT41 Hackers Exploiting Atexec and WmiExec Windows Modules for Malware Deployment Kaspersky MDR analysts recently uncovered a sophisticated targeted attack by the Chinese-speaking cyberespionage group APT41 against government IT services in the African region, marking a notable escalation in the group’s activity on the continent, which had previously seen minimal incidents from this actor. The attackers embedded hardcoded names of internal services, IP addresses, and proxy servers directly into...

Save to Folder

Choose a folder to save this article: