APT41 Targets Multiple Sectors in Sustained Campaign

• APT41 targets shipping, logistics, media, technology, and automotive sectors in Italy, Spain, Taiwan, Thailand, Turkey, and the U.K.


• Uses non-public malware for espionage and non-state-sponsored missions.


• Employs web shells, custom droppers, and public tools for persistence and data exfiltration.


• DUSTTRAP malware has 15 plugins for commands, file operations, keystrokes, and more.


• Code signing certificates likely stolen, linked to a South Korean gaming company.