China Hijacked an NSA Hacking Tool in 2014 and Used It for Years — APT31
Check Point found evidence that the Chinese group APT31, also known as Zirconium and Judgment Panda, gained access to a Windows hacking tool called EpMe and built its own tool, named Jian, from its code in 2014. The tool was used from 2015 until March 2017, when Microsoft patched the vulnerability it exploited.
CERT24