Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: APT31, Violet Typhoon
29
techniques
0
software
11,633
corpus matches
profile
ZIRCONIUM is a threat group operating out of China, active since at least 2017, that has targeted individuals associated with the 2020 US presidential election and prominent leaders in the international affairs community.
read this carefully
11,633 corpus matches is not attribution
That count is indicators which exhibit techniques ZIRCONIUM is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
execution
+17 more techniques
showing 30 of 11,633
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.