An advanced persistent threat (“APT”) is, typically, either a nation-state actor and aims at benefiting its state through sabotage, espionage, or industrial espionage; or a cybercriminal and its aims are to steal money through theft, fraud, ransom or blackmail. The Chinese-based threat actor APT41 blurs the lines: known to have run financially-motivated operations against the videogame industry as early as 2012, it got its notoriety in 2013 when it started engaging in state-sponsored campaigns, notably the theft of digital certificates which were later used to sign malware [1] [2].