MITRE ATT&CK G0096
APT41
View MITRE Group Page ↗
Aliases: Barium, Winnti, Wicked Panda, Brass Typhoon
Official Attribution Source: U.S. Department of Justice Indictments (D.D.C., August 2019 & August 2020)
Key Facts
Jurisdiction
People's Republic of China
Geographic origin
Cases
0
Prosecution matters
Defendants
0
Indicted individuals
Sanctions
0
OFAC designations
- Attributed Country: People's Republic of China.
- ATT&CK Group Reference: G0096 (APT41).
- Linked to 0 primary court prosecution records.
- Identified 0 individually charged operatives.
Prosecution Cases Attributed to This Actor
OPERATIONAL DEFENSE
Targeted Defensive Hardening for APT41
Primary Initial Access Defense
Enforce hardware FIDO2 multi-factor authentication across all perimeter VPN, Citrix, and cloud data portals. Prohibit SMS or push-based MFA that can be bypassed via vishing or SIM swapping.
Lateral Movement Interception
Restrict internal SMB (port 445) and RPC traversal between workstation subnets. Implement tiered Active Directory administration so domain administrator credentials are never cached on endpoints.