APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign
Tags
country: Malaysia India Indonesia Philippines Vietnam Taiwan
maec-delivery-vectors: Watering Hole
attack-pattern: Exploits - T1587.004 Exploits - T1588.005 Installutil - T1218.004 Malicious File - T1204.002 Malicious Link - T1204.001 Malware - T1587.001 Malware - T1588.001 Process Hollowing - T1055.012 Scheduled Task - T1053.005 Server - T1583.004 Server - T1584.004 Software - T1592.002 Web Shell - T1505.003 Installutil - T1118 Process Hollowing - T1093 Scheduled Task - T1053 Web Shell - T1100
Show in Graph
Common Information
Type Value
UUID fb6f0aa8-1ede-4891-b3ed-d24cd4fc675c
Fingerprint b55499dbf0fcaf99
Analysis status DONE
Considered CTI value 1
Text language
Published Aug. 24, 2021, midnight
Added to db Oct. 15, 2024, 7:20 p.m.
Last updated Nov. 17, 2024, 6:54 p.m.
Headline APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign
Title APT41 Resurfaces as Earth Baku With New Cyberespionage Campaign
Detected Hints/Tags/Attributes 51/3/3
Source URLs
Redirection Url
Details Source https://www.trendmicro.com/en_ie/research/21/h/apt41-resurfaces-as-earth-baku-with-new-cyberespionage-campaign.html
Details Source https://www.trendmicro.com/en_ph/research/21/h/apt41-resurfaces-as-earth-baku-with-new-cyberespionage-campaign.html
Details Source https://www.trendmicro.com/en_nl/research/21/h/apt41-resurfaces-as-earth-baku-with-new-cyberespionage-campaign.html
Details Source https://www.trendmicro.com/en_gb/research/21/h/apt41-resurfaces-as-earth-baku-with-new-cyberespionage-campaign.html
URL Provider
Details Provider Source level domain
Details trendmicro.com www.trendmicro.com
Attributes
Details Type #Events CTI Value
Details CVE 184 
cve-2021-26855
Details File 83 
installutil.exe
Details Threat Actor Identifier - APT 522 
APT41