What other aliases and vendor names is APT31 known by?

APT31 is tracked across the cybersecurity industry by multiple aliases, including: Altaire, BRONZE VINEWOOD, Chameleon, G0128, JUDGMENT PANDA, PerplexedGoblin, Red keres, RedBravo.

What are the primary motivations and sponsors of APT31?

APT31 operates from China with primary motivation categorized as Espionage / Financial, sponsored or affiliated with State-sponsored / Independent.

APT31

▲ High Threat China

Primary Aliases: JUDGMENT PANDA Violet Typhoon Altaire BRONZE VINEWOOD

Sponsor / State Affiliation Independent / Not Attributed

Primary Motivation Espionage / Financial

Active Timeline Unknown – Present

Confidence Rating 70% (Grounded)

FireEye characterizes APT31 as an actor specialized on intellectual property theft, focusing on data and projects that make a particular organization competetive in its field. Based on available data (April 2016), FireEye assesses that APT31 conducts network operations at the behest of the Chinese Government. Also according to Crowdstrike, this adversary is suspected of continuing to target upstream providers (e.g., law firms and managed service providers) to support additional intrusions against high-profile assets. In 2018, CrowdStrike observed this adversary using spear-phishing, URL “web bugs” and scheduled tasks to automate credential harvesting.