APT31
No sourced public emblem in this profile.
reference profile · reported nexus: CN (not nationality)
FireEye characterizes APT31 as an actor specialized on intellectual property theft, focusing on data and projects that make a particular organization competetive in its field. Based on available data (April 2016), FireEye assesses that APT31 conducts network operations at the behest of the Chinese Government. Also according to Crowdstrike, this adversary is suspected of continuing to target upstream providers (e.g., law firms and managed service providers) to support additional intrusions against high-profile assets. In 2018, CrowdStrike observed this adversary using spear-phishing, URL “web bugs” and scheduled tasks to automate credential harvesting.
Source-reported aliases: ZIRCONIUM, JUDGMENT PANDA, BRONZE VINEWOOD, Red keres, Violet Typhoon, TA412, Zirconium, TIDE CASTLE. Associations do not prove equivalence.
Target geography
Catalog-listed countries (associations, not attack counts): No country-level metadata
No bound claim-post feed for this label.
Historical casebook
No dated record curated yet; absence does not establish inactivity.
Planned Kinwilder coverage
Tentative editorial review windows, contingent on evidence and review; not promised publication dates or predictions of attacks.
No assigned review window.
References
https://duo.com/decipher/apt-groups-moving-down-the-supply-chain
https://go.recordedfuture.com/hubfs/reports/cta-2019-0206.pdf
https://redalert.nshc.net/2019/12/03/threat-actor-targeting-hong-kong-activists
https://twitter.com/bkMSFT/status/1201876664667582466
https://www.secureworks.com/research/bronze-vinewood-targets-supply-chains
https://www.secureworks.com/research/threat-profiles/bronze-vinewood
https://www.crowdstrike.com/resources/reports/2019-crowdstrike-global-threat-report
https://go.crowdstrike.com/rs/281-OBQ-266/images/Report2020CrowdStrikeGlobalThreatReport.pdf
https://research.checkpoint.com/2021/the-story-of-jian
https://supo.fi/-/suojelupoliisi-tunnisti-eduskuntaan-kohdistuneen-kybervakoiluoperaation-apt31-ksi