| Changed | Name | Country | Observed |
APT groups |
| | AeroBlade | [Unknown] | 2022 | |
| | Aggah | [Unknown] | 2018-Jun 2022 | |
| | Agrius |  | 2020-May 2023 | |
| | Allanite | [Unknown] | 2017 | |
| | ALPHV, BlackCat Gang | [Unknown] | 2021-Mar 2024 |  |
| | ↳ Subgroup: Scattered Spider | [Unknown] | 2022-Dec 2024  | |
| | Anchor Panda, APT 14 |  | 2012 | |
 | Angry Likho | [Unknown] | 2023 | |
| | Antlion | | 2011 | |
| | Aoqin Dragon | | 2013 | |
| | APT 3, Gothic Panda, Buckeye | | 2007-Nov 2017 | |
| | APT 4, Maverick Panda, Wisp Team | | 2007-Oct 2018 | |
| | APT 5, Keyhole Panda | | 2007-Aug 2019 | |
| | APT 6 | | 2011 | |
| | APT 12, Numbered Panda | | 2009-Nov 2016 | |
| | APT 16, SVCMONDR | | 2015 | |
| | APT 17, Deputy Dog, Elderwood, Sneaky Panda | | 2009-Jun 2024 | |
| | APT 18, Dynamite Panda, Wekby | | 2009-May 2016 | |
| | APT 19, Deep Panda, C0d0so0 | | 2013-Mar 2022 | |
| | APT 20, Violin Panda | | 2014-2017 | |
| | APT 29, Cozy Bear, The Dukes |  | 2008-Oct 2024 | |
| | APT 30, Override Panda | | 2005 | |
| | APT 31, Judgment Panda, Zirconium | | 2016-Mar 2024 | |
| | APT 32, OceanLotus, SeaLotus |  | 2013-Aug 2024 | |
| | APT 33, Elfin, Magnallium | | 2013-Apr 2024 | |
| APT 41 | | 2012-Aug 2024 | |
| | ↳ Subgroup: Earth Freybug | | 2012 | |
| | ↳ Subgroup: Earth Longzhi | | 2020-Apr 2023 | |
| | APT 42 | | 2015-Feb 2024 | |
| | APT-C-60 |  | 2018 | |
| | Aquatic Panda | | 2020 | |
| | AtlasCross | [Unknown] | 2023 | |
| | AVIVORE | | 2015 | |
| | Awaken Likho | [Unknown] | 2021 | |
| | Axiom, Group 72 | | 2008-2008/2014 | |
| | Bad Magic, RedStinger | [Unknown] | 2020-May 2023 | |
| | Bahamut | [Middle East] | 2016-Jul 2023 | |
| | Barium | | 2016-Nov 2017 | |
| | Berserk Bear, Dragonfly 2.0 | | 2015-May 2017 | |
| | The Big Bang | [Unknown] | 2017 | |
| | Bitter | [South Asia] | 2013-Nov 2024 | |
| | Blackgear | | 2018-Jul 2018 | |
| | BlackOasis | [Middle East] | 2015-Oct 2017 | |
| | BlackTech, Circuit Panda, Radio Panda | | 2010-Oct 2020 | |
| | Blackwood | | 2018-Jan 2024 | |
| | Blind Eagle |  | 2018-Jun 2024 | |
| | Blue Termite, Cloudy Omega | | 2013 | |
| | Bookworm | | 2015 | |
| | Boss Spider, Gold Lowell | | 2015-Nov 2018 | |
| | Bronze Butler, Tick, RedBaldNight, Stalker Panda | | 2006-Apr 2021 | |
| | Bronze Highland | | 2012-Jul 2024 | |
| | Bronze Starlight | | 2021-Mar 2023 | |
| | Buhtrap, Ratopak Spider | | 2015-Jun 2019 | |
| | Cadelle | | 2011 | |
| | Cadet Blizzard | | 2020-Jun 2024 | |
| | Callisto Group | [Unknown] | 2013 | |
| | Calypso | | 2016-Aug 2021 | |
| | Carbanak, Anunak |  | 2013-Apr 2023 | |
| | Carderbee | | 2023 | |
| | CardinalLizard | | 2014 | |
| | Careto, The Mask | [Unknown] | 2007-2022 | |
| | CeranaKeeper | | 2022-2023 | |
| | Chafer, APT 39 | | 2014-Sep 2020 | |
| | ChamelGang | | 2021-Jun 2023 | |
| | Chimera | | 2018-Oct 2019 | |
| | CIA |  | 1947-Sep 2018 | |
| | ↳ Subgroup: Longhorn, The Lamberts | | 2009 | |
| | ↳ Subgroup: [Unnamed group USA] | | 2019-Mar 2020 | |
| | Circus Spider | [Unknown] | 2019-Dec 2024 | |
| | Clever Kitten | | 2013 | |
| | CloudSorcerer | [Unknown] | 2024-Jul 2024 | |
| | Cobalt Group | | 2016-Oct 2019 | |
| Cold River | | 2019-Nov 2024 | |
| | Comment Crew, APT 1 | | 2006-May 2018 | |
| | Confucius |  | 2013-Aug 2021 | |
| | CopyKittens, Slayer Kitten | | 2013-Jan 2017 | |
| | Corkow, Metel | | 2011 | |
| | Cosmic Leopard, Operation Celestial Force |  | 2018 | |
| | CostaRicto | [Unknown] | 2017 | |
| | Covellite |  | 2017 | |
| | Curious Gorge | | 2022-Apr 2022 | |
| | Cutting Kitten, TG-2889 | | 2012-Mar 2016 | |
| | CyberAv3ngers | | 2019-Aug 2024 | |
| | Cyber Berkut | | 2014-May 2015 | |
| | Cyber Caliphate Army (CCA), United Cyber Caliphate (UCC) | [ISIS] | 2014-Apr 2017 | |
| | Dalbit | | 2022 | |
| | Dark Caracal |  | 2007-2020 | |
| | DarkCasino | [Unknown] | 2021 | |
| | DarkHotel | | 2007-Dec 2021 | |
| | DarkHydrus, LazyMeerkat | | 2016-Jan 2019 | |
| | Dark Pink | [Unknown] | 2022-Feb 2023 | |
| | DarkUniverse | [Unknown] | 2017 | |
| | Deceptikons, DeathStalker | [Unknown] | 2012-Jun 2020 | |
| | Desert Falcons | [Gaza] | 2011-Oct 2023 | |
| | DNSpionage | | 2019-Apr 2019 | |
| | Domestic Kitten | | 2016-Oct 2022 | |
| Donot Team | | 2016-Oct 2024 | |
| | Doppel Spider | | 2019-Sep 2023 | |
| | DragonOK | | 2015-Jan 2017 | |
| | DragonSpark | | 2022 | |
| | DustSquad, Golden Falcon | | 2014-2020 | |
| | Dust Storm | | 2010 | |
| | Earth Baxia | | 2024 | |
| | Earth Berberoka | | 2022 | |
| | Earth Krahang | | 2022 | |
| | Earth Lusca | | 2019-Sep 2024 | |
| | Earth Minotaur | | 2019 | |
| | Earth Wendigo | | 2019 | |
| | Elephant Beetle | [Unknown] | 2020 | |
| | El Machete | [Unknown] | 2010-Mar 2022 | |
| | Emissary Panda, APT 27, LuckyMouse, Bronze Union | | 2010-Aug 2023 | |
| | EmpireMonkey, CobaltGoblin | [Unknown] | 2018-Mar 2021 | |
| | Energetic Bear, Dragonfly | | 2010-Mar 2022 | |
| Equation Group | | 2001-Aug 2016 | |
| | Evilnum | [Unknown] | 2018-2022 | |
| | Ferocious Kitten | | 2015 | |
| | FIN4, Wolf Spider |  | 2013 | |
| | FIN5 | [Unknown] | 2008 | |
| | FIN6, Skeleton Spider | [Unknown] | 2015-Oct 2021 | |
| | FIN7 | | 2013-Jul 2024 | |
| | FIN8 | [Unknown] | 2016-Dec 2022 | |
| | APT9 | [Unknown] | 2018-Jan 2024 | |
| | FIN10 | [Unknown] | 2016 | |
| | FIN11 | [Unknown] | 2016-Dec 2024 | |
| | FIN12 | [Unknown] | 2018 | |
| | FIN13 | [Unknown] | 2016 | |
| | Fishing Elephant | [Unknown] | 2019 | |
| Flax Typhoon | | 2021-Nov 2023 | |
| | Flying Kitten, Ajax Security Team | | 2010-2013 | |
| | FunnyDream | | 2018 | |
| | Gallium | | 2018-Jun 2022 | |
| | Gallmaker | [Unknown] | 2017 | |
| | Gamaredon Group | | 2013-Oct 2024 | |
| | Gangnam Industrial Style | [Unknown] | 2019 | |
| | GCHQ |  | 1919-2010 | |
| | GCMAN | | 2016 | |
| | Gelsemium | | 2014-2023 | |
| | GhostNet, Snooping Dragon | | 2009-2010 | |
| | Goblin Panda, Cycldek, Conimes | | 2013-Jun 2020 | |
| | GoldenJackal | [Unknown] | 2019-2022 | |
| | Gorgon Group | | 2017-Jul 2020 | |
| | Grayling | [Unknown] | 2023 | |
| | GreenCharlie | | 2020 | |
| | Group5 | | 2015 | |
| | Hades | | 2017-Oct 2020 | |
| Hafnium | | 2021-Jan 2025 | |
| | Harvester | [Unknown] | 2021 | |
| | Hexane | | 2017-Jun 2022 | |
| | Hidden Lynx, Aurora Panda | | 2009-2014 | |
| | HomeLand Justice | | 2022-Jan 2024 | |
| | Honeybee | [Unknown] | 2017 | |
| | Hurricane Panda | | 2013-Mar 2014 | |
| | Hydrochasma | [Unknown] | 2022 | |
| | IAmTheKing | | 2018 | |
| | Icefog, Dagger Panda | | 2011-2018/2019 | |
| | Inception Framework, Cloud Atlas | | 2012-2024 | |
| | IndigoZebra | | 2014 | |
| | Indra | [Unknown] | 2019 | |
| | Indrik Spider | | 2007-Oct 2024 | |
| | Infy, Prince of Persia | | 2007-Feb 2017 | |
| | InvisiMole | | 2013-Mar 2022 | |
| | Iridium | | 2018-Dec 2018 | |
| | IronHusky | | 2017-Aug 2021 | |
| | ITG18 | | 2013-May 2020 | |
| | Karkadann | [Unknown] | 2020 | |
| | Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon | | 2010-Late 2022 | |
| Kimsuky, Velvet Chollima | | 2012-Feb 2025 | |
| | Lancefly | [Unknown] | 2018 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima | | 2007-Feb 2025 | |
| | ↳ Subgroup: Andariel, Silent Chollima | | 2009-Oct 2024 | |
| | ↳ Subgroup: BeagleBoyz | | 2014-Feb 2016 | |
| ↳ Subgroup: Bluenoroff, APT 38, Stardust Chollima | | 2014-Feb 2025 | |
| | LazyScripter | [Unknown] | 2018 | |
| | Lead | | 2016 | |
| | Leafminer, Raspite | | 2017 | |
| | leetMX |  | 2016 | |
| | Leviathan, APT 40, TEMP.Periscope | | 2013-Jul 2021 | |
| | Libyan Scorpions |  | 2015 | |
| | LightBasin | | 2016 | |
| LockBit Gang | [Unknown] | 2019-Feb 2025 | |
| | LookBack, TA410 | [Unknown] | 2019-Feb 2022 | |
| Lotus Blossom, Spring Dragon, Thrip | | 2012-Mar 2022 | |
| | Lucky Cat | | 2011 | |
| | LuminousMoth | | 2020 | |
| | Lurk | | 2011-Jun 2016 | |
| | Mabna Institute, Cobalt Dickens, Silent Librarian | | 2013-Sep 2020 | |
| | Madi | | 2011-Jul 2012 | |
| | Magic Hound, APT 35, Cobalt Illusion, Charming Kitten | | 2012-Aug 2024 | |
| | ↳ Subgroup: DEV-0270, Nemesis Kitten | | 2022-Nov 2023 | |
| | ↳ Subgroup: TA455, Smoke Sandstorm | | 2021-Sep 2023 | |
| | Magic Kitten | | 2007 | |
| | MalKamak | | 2018 | |
| | Mallard Spider | [Unknown] | 2008-Dec 2020 | |
| | Mikroceen | | 2017-Mar 2021 | |
| | Moafee | | 2014 | |
| | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Jul 2023 | |
| | MoneyTaker | | 2016 | |
| | Moonstone Sleet | | 2023-Aug 2024 | |
| | MoustachedBouncer |  | 2014 | |
| | MuddyWater, Seedworm, TEMP.Zagros, Static Kitten | | 2017-May 2024 | |
| Mustang Panda, Bronze President | | 2012-Feb 2025 | |
| | Mysterious Elephant | [Unknown] | 2023 | |
| | Naikon, Lotus Panda | | 2010-Apr 2022 | |
| | Nazar | | 2008 | |
| | NB65 | [Unknown] | 2022-Apr 2022 | |
| | Neodymium |  | 2016 | |
| | NetTraveler, APT 21, Hammer Panda | | 2004-Dec 2015 | |
| | Night Dragon | | 2009 | |
| | Nightshade Panda, APT 9, Group 27 | | 2013-Sep 2016 | |
| | NineBlog | | 2013 | |
| | Nitro, Covert Grove | | 2011-Jul 2014 | |
| | OilAlpha |  | 2022 | |
| | OilRig, APT 34, Helix Kitten, Chrysene | | 2014-Sep 2024 | |
| | ↳ Subgroup: Greenbug, Volatile Kitten | | 2016-Oct 2017 | |
| | OldGremlin | | 2020-Feb 2021 | |
| | OnionDog | | 2013 | |
| | OPERA1ER | [Unknown] | 2016-Jul 2023 | |
| | Operation Armor Piercer | | 2020 | |
| | Operation Bandidos | [Unknown] | 2021 | |
| | Operation Black Atlas | [Unknown] | 2015 | |
| | Operation BugDrop | | 2016 | |
| | Operation Comando | [Unknown] | 2018 | |
| | Operation Crimson Palace | | 2022 | |
| | Operation Digital Eye | | 2024 | |
| | Operation Diplomatic Specter | | 2022 | |
| | Operation Domino, Operation Kremlin | | 2019-Dec 2020 | |
| | Operation Dragon Castling | | 2022 | |
| | Operation Earth Kitsune | | 2019-Late 2022 | |
| | Operation Electric Powder | [Unknown] | 2016 | |
| | Operation EmailThief, TEMP_Heretic | | 2021 | |
| | Operation Epic Manchego | [Unknown] | 2020 | |
| Operation Ghostwriter | | 2017-Jan 2025 | |
| | Operation Ghoul | [Unknown] | 2016 | |
| | Operation Groundbait | | 2008 | |
| | Operation HangOver, Monsoon, Viceroy Tiger | | 2010-Jan 2020 | |
| | Operation Harvest | | 2016 | |
| | Operation Jacana | | 2023 | |
| | Operation Layover |  | 2013 | |
| Operation LiberalFace, MirrorFace | | 2019 | |
| | Operation Manul |  | 2015 | |
| | Operation Olympic Games |  | 2007 | |
| | Operation Parliament | [Unknown] | 2017 | |
| | Operation Poisoned News, TwoSail Junk | | 2020 | |
| | Operation Poison Needles | | 2018 | |
| | Operation Potao Express | [Unknown] | 2015 | |
| | Operation PseudoManuscrypt | | 2021 | |
| | Operation Red Signature | | 2018 | |
| | Operation RestyLink | [Unknown] | 2021 | |
| | Operation RusticWeb | | 2023 | |
| | Operation Rusty Flag | [Unknown] | 2023 | |
| | Operation Shady RAT | | 2006 | |
| Operation SalmonSlalom | | 2025 | |
| | Operation SignSight | [Unknown] | 2020 | |
| | Operation Silent Skimmer | [Unknown] | 2022 | |
| | Operation SLOW#TEMPEST | | 2024 | |
| | Operation Spalax | [Unknown] | 2020 | |
| | Operation Tainted Love | | 2023 | |
| | Operation Titan Rain | | 2003 | |
| | Operation Triangulation | [Unknown] | 2023 | |
| | Operation TunnelSnake | [Unknown] | 2018 | |
| | Operation ViceLeaker | [Unknown] | 2018 | |
| | Operation WizardOpium | | 2019 | |
| | Orangeworm | [Unknown] | 2015-Jan 2020 | |
| | Packrat | [Latin America] | 2008 | |
| | Parisite, Fox Kitten, Pioneer Kitten | | 2017-Nov 2020 | |
| | PassCV | | 2016 | |
| | Patchwork, Dropping Elephant | | 2013-Jul 2024 | |
| | Pinchy Spider, Gold Southfield | | 2018-Oct 2024 | |
| | PittyTiger, Pitty Panda | | 2011-2014 | |
| | Platinum | | 2009-Nov 2019 | |
| PlushDaemon | | 2019 | |
| | Poison Carp, Evil Eye | | 2018-Jun 2023 | |
| | Polonium | | 2022-Sep 2022 | |
| | Poseidon Group |  | 2005-Feb 2016 | |
| | PowerPool | [Unknown] | 2018 | |
| | Promethium, StrongPity | | 2012-Nov 2021 | |
| | Pusikurac | [Unknown] | 2019 | |
| | Putter Panda, APT 2 | | 2007 | |
| | Rampant Kitten | | 2014 | |
| | Rancor | | 2017 | |
| | RATicate | [Unknown] | 2019 | |
| | Reaper, APT 37, Ricochet Chollima, ScarCruft | | 2012-Sep 2024 | |
| | RedAlpha | | 2015-2021 | |
| RedCurl | [Unknown] | 2018-2023 | |
| RedDelta | | 2020-Jul 2023 | |
| | RedEcho | | 2020 | |
| | RedFoxtrot | | 2014-Aug 2021 | |
| | RedGolf | | 2014 | |
| | RedHotel, TAG-22 | | 2021 | |
| | RevengeHotels | [Unknown] | 2015 | |
| | Riddle Spider | [Unknown] | 2020-Jun 2021 | |
| | Roaming Tiger | | 2014-Aug 2015 | |
| | Rocket Kitten, Newscaster, NewsBeef | | 2011-2017 | |
| | RTM | | 2015 | |
| | Safe | | 2013 | |
| | SaintBear, Lorec53 | | 2021-Oct 2022 | |
| Salt Typhoon, GhostEmperor | | 2020-Jan 2025 | |
| | Samurai Panda | | 2009 | |
| | SandCat |  | 2018 | |
| | Sandman | | 2022 | |
| Sandworm Team, Iron Viking, Voodoo Bear | | 2009-Dec 2024 | |
| | Scarab | | 2012-Mar 2022 | |
| | Scarlet Mimic | | 2015-Aug 2022 | |
| | Sea Turtle | | 2017-2021 | |
| | Shadow Academy | [Unknown] | 2020 | |
| | Shadow Network | | 2010-2010 | |
| | ShaggyPanther | | 2018 | |
| | SharpPanda, Sharp Dragon | | 2018-Mar 2024 | |
| | ShroudedSnooper | [Unknown] | 2023 | |
| | SideCopy | | 2019-Oct 2023 | |
| | SideWinder, Rattlesnake | | 2012-Oct 2023 | |
| | Siesta | | 2014 | |
| | Silence, Contract Crew | [Unknown] | 2016-Aug 2022 | |
| | Sima | | 2016 | |
| | Slingshot | [Unknown] | 2012 | |
| | Snake Wine | | 2016 | |
| | Snowglobe, Animal Farm |  | 2011 | |
| Sofacy, APT 28, Fancy Bear, Sednit | | 2004-Oct 2024 | |
| | Sowbug | [Unknown] | 2015 | |
| Space Pirates | | 2017-Nov 2024 | |
| | Sphinx | [Unknown] | 2014 | |
| | Sprite Spider, Gold Dupont | [Unknown] | 2015-Nov 2022 | |
| | Stealth Falcon, FruityArmor |  | 2012-2023 | |
| | Stone Panda, APT 10, menuPass | | 2006-Jun 2024 | |
| | Storm-0558 | | 2023 | |
| | Strider, ProjectSauron | | 2011 | |
| | Suckfly | | 2014-Late 2015 | |
| | SunCrypt Gang | [Unknown] | 2019-Oct 2020 | |
| | Sweed | [Unknown] | 2017-2019 | |
| | Syrian Electronic Army (SEA), Deadeye Jackal |  | 2011-Aug 2021 | |
| | ↳ Subgroup: Goldmouse, APT-C-27 | | 2014 | |
| | ↳ Subgroup: Pat Bear, APT-C-37 | | 2015 | |
| | TA2101, Maze Team | [Unknown] | 2019-Feb 2024 | |
| | TA2541 | [Unknown] | 2017 | |
| | TA2552 | [Unknown] | 2019 | |
| | TA2722 | [Unknown] | 2020 | |
| | TA413 | | 2019-2022 | |
| | TA428 | | 2013-Jan 2022 | |
| | TA459 | | 2017-Apr 2022 | |
| | TA505, Graceful Spider, Gold Evergreen | | 2006-Nov 2022 | |
| | TA530 | [Unknown] | 2016-Nov 2016 | |
| | TA555 | [Unknown] | 2018 | |
| | TA558 | [Unknown] | 2018-Jun 2023 | |
| | TAG-28 | | 2021 | |
| | TAG-38 | | 2021 | |
| | TAG-100 | | 2024 | |
| | Taidoor | | 2008-Late 2015 | |
| | TaskMasters | | 2010-May 2021 | |
| | TeamSpy Crew | | 2010-Feb 2017 | |
| | TeleBots | | 2015-Oct 2020 | |
| | Temper Panda, admin@338 | | 2014 | |
| | Tempting Cedar Spyware | | 2015 | |
| | TEMP.Veles | | 2014-Mar 2022 | |
| | Terbium | [Unknown] | 2012 | |
| | TIDRONE | [Unknown] | 2024-2024 | |
| | Tiny Spider | [Unknown] | 2015-2017 | |
| | ToddyCat | | 2020-2021 | |
| | Tomiris | [Unknown] | 2020 | |
| | Tonto Team, HartBeat, Karma Panda | | 2009-Apr 2023 | |
| | Tortilla | [Unknown] | 2021 | |
| | Tortoiseshell, Imperial Kitten | | 2018-Oct 2023 | |
| | Tracer Kitten | | 2020 | |
| | Transparent Tribe, APT 36 | | 2013-Jun 2024 | |
| | Traveling Spider | [Unknown] | 2019-Mar 2021 | |
| | Tropical Scorpius, RomCom | | 2019-Oct 2024 | |
| | Tropic Trooper, Pirate Panda, APT 23, KeyBoy | | 2011-Jun 2023 | |
| | Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens | | 2010-Oct 2018 | |
| | Turla, Waterbug, Venomous Bear | | 1996-Dec 2023 | |
| | Twisted Panda | | 2021 | |
| | UltraRank | [Unknown] | 2015-Nov 2020 | |
| | UNC215 | | 2019 | |
| | UNC2447 | [Unknown] | 2020 | |
| | UNC2891 | [Unknown] | 2020 | |
| | UNC3886 | | 2021-2023 | |
| | UNC4191 | | 2022 | |
| | UNC5221, UTA0178 | [Unknown] | 2023 | |
| | Unfading Sea Haze | | 2018 | |
| | Urpage | [Middle East] | 2018 | |
| | Velvet Ant | | 2023-Jul 2024 | |
| | Vendetta, TA2719 | | 2020 | |
| | Venom Spider, Golden Chickens | | 2017-Feb 2019 | |
| | Vicious Panda | | 2015-Mar 2020 | |
| | Viking Spider | [Unknown] | 2019-Oct 2023 | |
| Void Arachne | | 2024 | |
| | Void Balaur | [Unknown] | 2017 | |
| | Volatile Cedar | | 2012-Early 2020 | |
| | Volt Typhoon | | 2020-Jun 2024 | |
| | Wassonite | | 2018-Oct 2019 | |
| | The White Company | [Unknown] | 2017-Nov 2017 | |
| | Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| | Wicked Spider, APT 22 | | 2018 | |
| | WildCard | [Unknown] | 2021 | |
| | Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| | WildPressure | [Unknown] | 2019-Spring 2021 | |
| | WindShift | [Unknown] | 2018 | |
| | Winnti Group, Wicked Panda | | 2010-Mar 2021 | |
| | Winter Vivern | [Unknown] | 2020-Oct 2023 | |
| | WIP26 | [Unknown] | 2022 | |
| | WIRTE Group | [Middle East] | 2018-Feb 2024 | |
| | Wizard Spider, Gold Blackburn | | 2014-Dec 2023 | |
| | Worok | | 2020 | |
| | XDSpy | [Unknown] | 2011-Jul 2024 | |
| | xHunt | | 2018-Aug 2019 | |
| YoroTrooper | | 2022 | |
| | ZooPark | [Unknown] | 2015 | |
| [Unnamed groups: China] | | 2018-Dec 2024 | |
| [Unnamed groups: Iran] | | 2019-Jan 2025 | |
| [Unnamed groups: North Korea] | | 2019-Jan 2025 | |
| [Unnamed groups: Russia] | | 2014-Jan 2025 | |
Other groups |
| | 8220 Gang | | 2017-May 2023 | |
| | Achilles | [Unknown] | 2018-Oct 2018 | |
| ALTDOS, Desorden |  | 2020-Feb 2025 | |
| | Andromeda Spider | | 2011-Nov 2017 | |
| | Avalanche | | 2006-Dec 2016 | |
| | Bamboo Spider, TA544 | [Unknown] | 2016-Apr 2022 | |
| | Bismuth | | 2012 | |
| | Boson Spider | [Unknown] | 2015-Nov 2017 | |
| | Circles | | 2015 | |
| | CoralRaider | | 2023-Feb 2024 | |
| | Cron | | 2015-Dec 2017 | |
| | Cyber fighters of Izz Ad-Din Al Qassam, Fraternal Jackal | | 2012-May 2016 | |
| | Dark Basin | | 2013 | |
| | Dungeon Spider | | 2016-Feb 2018 | |
| | Fxmsp | | 2016-Jul 2020 | |
| | GambleForce | | 2023 | |
| | Gnosticplayers | | 2019-Sep 2019 | |
| | Guru Spider | | 2014-Mar 2018 | |
| | Hacking Team |  | 2003 | |
| | Handala Hack Team | [Unknown] | 2023-Dec 2023 | |
| | Infraud Organization | [Various] | 2010-Jul 2020 | |
| | Karakurt | [Unknown] | 2021-Sep 2022 | |
| | Lapsus$ | | 2021-Dec 2023 | |
| | Lunar Spider | | 2019 | |
| | Monty Spider | | 2012-Mar 2020 | |
| | Moses Staff | | 2021-Nov 2022 | |
| | Mummy Spider, TA542 | [Unknown] | 2014-Jun 2024 | |
| | Narwhal Spider | [Unknown] | 2007-Oct 2018 | |
| | NetSec, USDoD |  | 2020-Oct 2024 | |
| | OurMine |  | 2016-Feb 2020 | |
| | Operation Windigo | | 2011-Mar 2017 | |
| | Pacha Group | | 2018-May 2019 | |
| | Parinacota | [Unknown] | 2018 | |
| | Planetary Reef |  | 2020 | |
| | ResumeLooters | [Unknown] | 2023 | |
| | Retefe Gang, Operation Emmental | | 2013 | |
| | Roaming Mantis | [Unknown] | 2017-Jul 2022 | |
| | Rocke, Iron Group | | 2018-Apr 2021 | |
| | Salty Spider | | 2003-Dec 2018 | |
| | Scully Spider, TA547 | [Unknown] | 2017-Mar 2024 | |
| | Shadow Brokers | | 2016-Nov 2017 | |
| | ShinyHunters | [Unknown] | 2020-May 2024 | |
| | Shark Spider | | 2011-Jul 2014 | |
| | Smoky Spider | [Unknown] | 2011-Apr 2019 | |
| | TA511 | [Unknown] | 2018-Oct 2020 | |
| | TA516 | [Unknown] | 2016-Feb 2020 | |
| | TA551, Shathak | | 2016-Jan 2021 | |
| | TA554 | [Unknown] | 2017 | |
| | UNC1878 | [Unknown] | 2020 | |
| UNC5537 |  | 2024-Nov 2024 | |
| | [Vault 7/8] | | 2017-Feb 2024 | |
| | Yanbian Gang | | 2013-Dec 2020 | |
| | Yingmob | | 2016-Jan 2017 | |
| | Zombie Spider | | 2010-Jun 2021 | |
Unknown groups |
| | Big Panda | | | |
| | Boulder Bear | | | |
| | Clockwork Spider | [Unknown] | | |
| | Corsair Jackal |  | | |
| | Dextorous Spider | [Unknown] | | |
| | Dizzy Panda | | | |
| | Electric Panda | | | |
| | Eloquent Panda | | | |
| | Flyfox | [Unknown] | | |
| | Foxy Panda | | | |
| | Ghost Jackal | [Unknown] | | |
| | Gibberish Panda | | | |
| | HolyWater | [Unknown] | | |
| | Impersonating Panda | | | |
| | Knockout Spider | [Unknown] | | |
| | Kumsong121 | | | |
| | Magnetic Spider | [Unknown] | | |
| | Outlaw Spider | [Unknown] | | |
| | Overlord Spider | [Unknown] | | |
| | Pale Panda | | | |
| | ParkingBear | [Unknown] | | |
| | Poisonous Panda | | | |
| | Predator Panda | | | |
| | Sabre Panda | | | |
| | Singing Spider | [Unknown] | | |
| | Solar Spider | [Unknown] | | |
| | Spicy Panda | | | |
| | Test Panda | | | |
| | Toxic Panda | | | |
| | Union Panda | | | |
| | Union Spider | [Unknown] | | |
| | Viking Jackal | | | |
| | Wet Panda | | | |
| | _[ Interesting malware not linked to an actor yet ]_ | | | |
