APT31, also known by aliases such as Zirconium, BRONZE VINEWOOD, and Judgment Panda, is a Chinese state-sponsored threat actor primarily engaged in cyber espionage. The group has been active since at least 2010 and is attributed to the Hubei State Security Department, located in Wuhan, China. Its primary motivation is to gather intelligence, including political, economic, and military advantages for the Chinese government and state-owned enterprises, as well as to repress critics of the Chinese regime and steal trade secrets. APT31 distinguishes itself by employing a two-pronged approach to initial access, often targeting subsidiaries, managed service providers, or even spouses of primary targets. Over time, the group has evolved from using various custom malware families to incorporating cracked versions of CobaltStrike and extensively leveraging legitimate cloud services for command and control and data exfiltration, enabling stealthier operations.

Aliases del actor

APT 31BRONZE VINEWOODJUDGMENT PANDARed keresTA412Violet TyphoonZIRCONIUMZirconiumBlack Vineotrosapt-31bronze vinewoodzirconium

Actores similares

Predator Pandaapt · 0apt-blackgearactor · 1apt-blacktechactor · 1apt-flaxtyphoonactor · 1apt-redbaldknightactor · 1apt-redfoxtrotactor · 1apt-redjuliettactor · 1apt-redoctoberactor · 1apt-sharppandaactor · 1apt-twistedpandaactor · 1