Cyber threats / Threat actors

APT31

CN Suspected sponsor: China · ATT&CK G0128
0
APAC targets
29
Techniques
1
Incidents
0
News · 30d
Profile
Also known as: BRONZE VINEWOOD, JUDGMENT PANDA, Red keres, TA412, TIDE CASTLE, Violet Typhoon, ZIRCONIUM

FireEye characterizes APT31 as an actor specialized on intellectual property theft, focusing on data and projects that make a particular organization competetive in its field. Based on available data (April 2016), FireEye assesses that APT31 conducts network operations at the behest of the Chinese Government. Also according to Crowdstrike, this adversary is suspected of continuing to target upstream providers (e.g., law firms and managed service providers) to support additional intrusions against high-profile assets. In 2018, CrowdStrike observed this adversary using spear-phishing, URL “web bugs” and scheduled tasks to automate credential harvesting.

Related profiles: Storm-0558

Profiles whose description names this actor, that this description names, or that share one of its names. The sources mention them together; they are not necessarily the same group.

ATT&CK techniques · 29
Reconnaissance
Resource Development
Initial Access
Execution
Persistence
Privilege Escalation
Stealth
Credential Access
Discovery
Command and Control
Exfiltration
Incidents attributed
In the news
Targets
No victim countries in the sources.
Relevance to the EU
EU relevance: Low
No EU member state among its known victims and no overlap with EU projects
No EU cooperation projects recorded in its target countries.
References
Sources: MISP, MITRE