by exploiting vulnerable Internet facing web applications, including using a zero-day vulnerability in the USAHerds application (CVE-202144207) as well as the now infamous zero-day in Log4j (CVE-2021-44228). While the overall goals of APT41's campaign remain unknown, our