SOC files: an APT41 attack on government IT services in Africa | Securelist

APT41 launched a sophisticated, multi-stage cyberespionage campaign against African government IT services, leveraging a blend of custom and public tools—including Cobalt Strike, Impacket, and DLL sideloading—to achieve stealthy lateral movement, credential theft, and data exfiltration via compromised internal infrastructure.