value:  APT41 gained access to production environments where they could inject malicious code into legitimate signed files and widely distribute them to end users. 
name: Supply Chain Compromise: Compromise Software Supply Chain