APT41 is a threat actor attributed to CN, also known as Amoeba, BrazenBamboo, Winnti Group. This group is tracked in the Strobes VI threat intelligence database.

What vulnerabilities does APT41 exploit?

APT41 is known to exploit 15 CVEs. View the full list on the Strobes VI threat actor profile page.

Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives

PoC for every finding

30+ tools orchestrated

Book a Demo Learn More

Setup in 5 minutesSOC 2 & ISO 27001

APT41

Also known as: Amoeba, BrazenBamboo, Winnti Group, HOODOO, Leopard Typhoon, Bronze Export, SparklingGoblin, Starchy Taurus, Winnti, Blackfly, TA415, BRONZE ATLAS, LEAD, Brass Typhoon, Grayfly, Double Dragon, Bronze Atlas, TG-3279, Wicked Spider, TG-2633, Red Kelpie, WICKED SPIDER, G0044, BARIUM, G0096, Pigfish, APT 22, Bronze Olive, WICKED PANDA, Earth Baku, Wicked Panda, BRONZE EXPORT, Casper

CNFinancial crime , Information theft and espionage

Exploited CVEs

Overview

APT41 is a prolific cyber threat group that carries out Chinese state-sponsored espionage activity in addition to financially motivated activity potentially outside of state control.

Exploited Vulnerabilities

CVE ID	Action
CVE-2019-3396	View Details