[dmhmr]

APT 40 and 31 are well documented [1] [2].

[1] https://www.fireeye.com/blog/threat-research/2019/03/apt40-e...

[2] https://research.checkpoint.com/2021/the-story-of-jian/