A state-sponsored tool was discovered inside the Linux servers of an undisclosed telecom company. The tool was most likely used by Chinese advanced persistent threat group APT41. Researchers said the tool supported Chinese espionage efforts, but the group has financial motives as well. The malware parses and extracts SMS message data from the network traffic, which includes the SMS message contents, the IMSI number, and the source and destination phone numbers. It also unveils the scope of the state actors purview and what they are capable of achieving.”]