APT41 spear-phishing, supply chain campaigns target pharma, healthcare

By relying on backdoors, the group is able to maintain its presence on the victim’s network and is known to create a RAR archive for exfiltration and removal of evidence.