The emerging actor, part of the APT41 nexus, gains initial access via phishing and uses legitimate network services to obscure cyberespionage activities ...