Threat actors from the widely known APT41 threat group have compromised thirteen (13) organizations worldwide over the past year, including breaching six (6) government infrastructures in six (6) US states. APT41, also tracked as Wicked Panda and Winniti, is one of the oldest known Chinese-backed espionage organizations which focuses heavily on financially-motivated operations. Historically, APT41 has targeted corporations within the technology, gaming, telecommunications, and healthcare industries across over a dozen countries. In recent campaigns by APT41, threat actors initialize their reconnaissance phase by scanning the target with port scanners, network mappers, and vulnerability scripts such as Nmap, Sublist3r, and Acunetix, followed by exploiting web applications susceptible to SQL injection attacks. Once breached, APT41 actors have the ability to execute arbitrary code via the server command shell and begin communications between target and command-and-control (C2) servers. Furthermore, threat actors continue to execute payloads on the compromised systems establishing persistence, escalating privilege rights, masking communications to avoid detection, and deploying espionage scripts to gather data across the enterprise and exfiltrating data to APT41 C2 servers. APT41 has been a significant player in the threat landscape since 2007 and is predicted to continue to be so in the near future. CTIX continues to monitor threat actor activity worldwide and will provide additional updates accordingly.