ZIRCONIUM
ZIRCONIUM is a threat group operating out of China, active since at least 2017, that has targeted individuals associated with the 2020 US presidential election and prominent leaders in the international affairs community.
Attribution signal
?Score = mentions × confidence weight, summed across all attributed sources. Higher source diversity increases the score.≥ 10 High≥ 3 Moderate< 3 Low1.6
Low signal strength
Mentions2
Sources1
High conf.2
Last seenMay 2026
First observed
2021-03-24
Last active
—
Origin
China
Aliases
3
Techniques
29
Campaigns
0
China
Attribution signals
2 mentions · 1 source#1exploitedhigh
Victimology
dark-reading
May 2026
"China-linked groups like Linen Typhoon and Violet Typhoon exploited SharePoint vulnerabilities to steal intellectual property"
#2reported onhigh
Victimology
ncsc-uk-all
May 2026
"The NCSC has previously reported on the targeting of government officials' accounts by China state-affiliated APT31, Russian Federal Security Service (FSB) actor Star Blizzard and Iran's Islamic Revolutionary Guard Corps (IRGC)."
Hedge terms observed
exploitedreported on