[GUEST ACCESS MODE: Data is scrambled or limited to provide examples. Make requests using your API key to unlock full data. Check https://lunarcrush.ai/auth for authentication information.]

![TheHackersNews Avatar](https://lunarcrush.com/gi/w:24/cr:twitter::209811713.png) The Hacker News [@TheHackersNews](/creator/twitter/TheHackersNews) on x 926.3K followers
Created: 2025-07-21 17:24:07 UTC

🚨 China-linked APT41 breached African gov IT networks using internal SharePoint servers as C2.

The attack used stolen admin creds, DLL sideloading, and fake GitHub domains—marking rare APT41 activity in Africa.

Full details →

![](https://pbs.twimg.com/card_img/1947332687624036352/LjJf1tLP?format=jpg&name=800x419)

XXXXXX engagements

![Engagements Line Chart](https://lunarcrush.com/gi/w:600/p:tweet::1947346866867142888/c:line.svg)

**Related Topics**
[networks](/topic/networks)

[Post Link](https://x.com/TheHackersNews/status/1947346866867142888)