Zirconium

Actor Type Nation State
Attributed to Nation China
Directly Linked Intrusion Sets APT31 , Violet Typhoon
Associated MITRE ATT&CK Group ZIRCONIUM (G0128)

Zirconium is an intrusion set tracked by Microsoft, which shows overlap with APT31. Microsoft subsequently renamed the group as 'Violet Typhoon'. The group is attributed to China.

According to researchers at Microsoft, Zirconium have been involved in cyberattacks targeting individuals and organizations related to the U.S. presidential election and the international affairs community.

The group was observed using web bugs to perform reconnaissance on targeted accounts to determine their validity and activity levels.

Cyber Threat Graph Context

Explore how this Intrusion Set relates to the wider threat graph

References