Intrusion setG0128
ZIRCONIUM
Also tracked as APT31, Violet Typhoon
ZIRCONIUM is a threat group operating out of China, active since at least 2017, that has targeted individuals associated with the 2020 US presidential election and prominent leaders in the international affairs community.
- Documented techniques
- 29
- Assessed origin
- China
- First seen
- 2017
- Basis
- MITRE ATT&CK
How they break in
Techniques MITRE has documented this group using, grouped by the stage of an attack they belong to. This is the actionable half: each one is a behaviour you can look for in your own logs, and a control you can test.