https://vpncentral.com/apt41-targets-linux-cloud-servers-with-new-winnti-backdoor-built-to-steal-credentials/
APT41 targets Linux cloud servers with new Winnti backdoor built to steal credentials
Apr 16, 2026 - APT41 is expanding its Linux toolset again, this time with a backdoor built for cloud workloads. Recent reporting says the group deployed a new Winnti-family...
linux cloudtargetsserversnewwinnti
https://threats.wiz.io/all-incidents/revivalstone-campaign-by-winnti
RevivalStone Campaign by Winnti
The China-linked APT group Winnti (APT41) has been linked to a new cyber espionage campaign, RevivalStone, targeting Japanese manufacturing, materials, and...
campaignwinnti
https://thecyberwire.com/podcasts/research-saturday/39/transcript
Winnti Umbrella Chinese threat group.
Researchers from ProtectWise's 401TRG team recently published research linking a variety of new and previously reported Chinese cyber threat groups. Tom Hegel...
winntiumbrellachinesethreatgroup