APT41 leveraged a supply chain attack by distributing a compromised version of CCleaner, a trusted software, to gain initial access to systems. The attack was identified through unusual network traffic patterns, confirming the presence of a known malicious hash associated with the CCleaner supply chain attack.