Reportseverity: High2022-03-08
APT41 compromises at least six U.S. state government networks
published by Mandiant
Actor
Chinese state-affiliated group notable for blending espionage with financially-motivated operations (game-industry currency theft, cryptocurrency). Implicated in multiple software supply-chain compro…
Summary
Mandiant reported that APT41 successfully compromised at least six U.S. state government networks between May 2021 and February 2022 via web-application exploitation, including rapid weaponization of zero-day vulnerabilities in USAHerds and Log4j.
Tags
us-state-governmentlog4shellusaherds