APT41’s New Subgroup Earth Longzhi Targets East and Southeast Asia

Both campaigns by the group used spear-phishing emails as the primary entry vector to deliver its malware. It embeds the malware in a password-protected archive or shares a link to download it, luring the victim with information about a person.