Threat Actor Profile

ZIRCONIUM

Altaire APT31 Chameleon G0128 PerplexedGoblin RedBravo Sheathminer Storm-2603 Violet Typhoon WebFans Wuhan Xiaoruizhi Science and Technology Company

▲ High Threat

US Government and Critical Infrastructure Espionage, Global Diplomatic and Telecommunications Targeting

Origin China

Sponsor People's Republic of China (PRC)

Motivation Strategic espionage and political intelligence collection

Target Sectors

Government Defense Telecommunications Critical Infrastructure Technology Diplomatic Entities

Spear-phishing

Exploitation of Public-Facing Applications

Living off the Land (LotL)

Credential Access

DLL Side-loading

Malware Deployment (Custom and Commodity)

CISA Advisories ↗

Hacking the mainframe…