JungleBamboo
MITRE G0010Also known as APT31, Violet Typhoon, Tide Castle, Violet Typhon, TA412
Reports
3
First seen
Sep 9, 2026
Last seen
Sep 15, 2026
Motivation
Espionage
Relationships
Filled ◆ = CVE exploited in the wild. Entities that appear together in Signalis reporting — co-mention, not confirmed collaboration. Reports naming many actors at once (weekly roundups) are excluded from relationship edges.
Targeting
Sectors
Victim regions
United States ×1
Top ATT&CK techniques
T1190 Exploit Public-Facing Application ×3T1055 Process Injection ×3T1068 Exploitation for Privilege Escalation ×3T1566 Phishing ×3T1655 Steal Credentials from Web Browsers ×1T1041 Exfiltration Over C2 Channel ×1T1036 Masquerading ×1T1056.004 Interaction Recording: Session Recording ×1T1059 Command and Scripting Interpreter ×1T1087 Account Discovery ×1T1059.001 Command and Scripting Interpreter: PowerShell ×1T1218 System Binary Proxy Execution ×1
Indicators
hash_sha256 ×13domain ×9filename ×9cve ×9url ×7email ×1ip_v4 ×1ip_v6 ×1
Indicator values are available on Pro and via the API.
Associated CVEs
Recent reports
Critical