Cyber Resilience

Threat actor · all actors

ZIRCONIUMG0128 state

🇨🇳 CN

aka ZIRCONIUM, APT31, Violet Typhoon, JUDGMENT PANDA, BRONZE VINEWOOD, Red keres, TA412, TIDE CASTLE

Last updated: 2026-08-20

2attributed CVEs
42ATT&CK techniques
7.9IDF score (tooling uniqueness)
1exclusive CVEs
2013years active

About this actor

FireEye characterizes APT31 as an actor specialized on intellectual property theft, focusing on data and projects that make a particular organization competetive in its field. Based on available data (April 2016), FireEye assesses that APT31 conducts network operations at the behest of the Chinese Government. Also according to Crowdstrike, this adversary is suspected of continuing to target upstream providers (e.g., law firms and managed service providers) to support additional intrusions against high-profile assets. In 2018, CrowdStrike observed this adversary using spear-phishing, URL “web bugs” and scheduled tasks to automate credential harvesting.

Source: MITRE ATT&CK

Names & naming systems

Each vendor coins its own name for the same actor. Where a name follows a known scheme we attribute it; the rest are listed honestly as unclassified.

MITRE ATT&CKG-number catalogue id

G0128

Microsoftweather-system names

Violet Typhoon

CrowdStrikenation-animal names

JUDGMENT PANDA

Mandiant / genericAPT numbering

APT31

Secureworkscolour-metal names

BRONZE VINEWOOD

ProofpointTA threat-actor id

TA412

Unclassifiedno scheme matched

ZIRCONIUMRed keresTIDE CASTLE

How we know this

Data origin
MITRE ATT&CK Imported from the MITRE ATT&CK STIX bundle as an intrusion-set object.
Techniques
MITRE ATT&CK STIX mappings — 42 ATT&CK techniques on file.
Named victims
None on file.

See how actor data is built for the full pipeline.

Activity timeline

Profile

CVERiskCVSSEPSSPublishedProducts
CVE-2013-3894 8.78.10.93122013-10-09see CVE
CVE-2013-3128 8.00.00.57842013-10-09see CVE

Mitigating controls (NIST 800-53)

ControlTechniques coveredCoverage
SI-423 / 4255%
SI-322 / 4252%
CM-621 / 4250%
CA-720 / 4248%
CM-220 / 4248%
AC-418 / 4243%
SC-718 / 4243%
CM-715 / 4236%
AC-312 / 4229%
AC-610 / 4224%
AC-29 / 4221%
SI-29 / 4221%
SI-79 / 4221%
SI-108 / 4219%
IA-96 / 4214%

Co-occurring actors

Similar actors

Similar TTPs

Overlapping CVEs

Active in same years

Same nation-state

Same category