Changed | Name | Country | Observed |
APT groups |
| AeroBlade | [Unknown] | 2022 | |
| Aggah | [Unknown] | 2018-Jun 2022 | |
| Agrius | | 2020-May 2023 | |
| Allanite | [Unknown] | 2017 | |
| Anchor Panda, APT 14 | | 2012 | |
| Antlion | | 2011 | |
| Aoqin Dragon | | 2013 | |
| APT 3, Gothic Panda, Buckeye | | 2007-Nov 2017 | |
| APT 4, Maverick Panda, Wisp Team | | 2007-Oct 2018 | |
| APT 5, Keyhole Panda | | 2007-Aug 2019 | |
| APT 6 | | 2011 | |
| APT 12, Numbered Panda | | 2009-Nov 2016 | |
| APT 16, SVCMONDR | | 2015 | |
| APT 17, Deputy Dog, Elderwood, Sneaky Panda | | 2009-Jun 2024 | |
| APT 18, Dynamite Panda, Wekby | | 2009-May 2016 | |
| APT 19, Deep Panda, C0d0so0 | | 2013-Mar 2022 | |
| APT 20, Violin Panda | | 2014-2017 | |
| APT 29, Cozy Bear, The Dukes | | 2008-Jun 2024 | |
| APT 30, Override Panda | | 2005 | |
| APT 31, Judgment Panda, Zirconium | | 2016-Mar 2024 | |
| APT 32, OceanLotus, SeaLotus | | 2013-Aug 2024 | |
| APT 33, Elfin, Magnallium | | 2013-Apr 2024 | |
| APT 41 | | 2012-Aug 2024 | |
| ↳ Subgroup: Earth Freybug | | 2012 | |
| ↳ Subgroup: Earth Longzhi | | 2020-Apr 2023 | |
| APT 42 | | 2015-Feb 2024 | |
| Aquatic Panda | | 2020 | |
| AtlasCross | [Unknown] | 2023 | |
| AVIVORE | | 2015 | |
| Awaken Likho | [Unknown] | 2021 | |
| Axiom, Group 72 | | 2008-2008/2014 | |
| Bad Magic, RedStinger | [Unknown] | 2020-May 2023 | |
| Bahamut | [Middle East] | 2016-Jul 2023 | |
| Barium | | 2016-Nov 2017 | |
| The Big Bang | [Unknown] | 2017 | |
| Bitter | [South Asia] | 2013-Apr 2023 | |
| Blackgear | | 2018-Jul 2018 | |
| BlackOasis | [Middle East] | 2015-Oct 2017 | |
| BlackTech, Circuit Panda, Radio Panda | | 2010-Oct 2020 | |
| Blackwood | | 2018-Jan 2024 | |
| Blind Eagle | | 2018-Jun 2024 | |
| Blue Termite, Cloudy Omega | | 2013 | |
| Bookworm | | 2015 | |
| Bronze Butler, Tick, RedBaldNight, Stalker Panda | | 2006-Apr 2021 | |
| Bronze Highland | | 2012-Jul 2024 | |
| Bronze Starlight | | 2021-Mar 2023 | |
| Cadelle | | 2011 | |
| Cadet Blizzard | | 2020-Jun 2024 | |
| Callisto Group | [Unknown] | 2013 | |
| Calypso | | 2016-Aug 2021 | |
| Carderbee | | 2023 | |
| CardinalLizard | | 2014 | |
| Careto, The Mask | [Unknown] | 2007-Feb 2014 | |
| CeranaKeeper | | 2022-2023 | |
| Chafer, APT 39 | | 2014-Sep 2020 | |
| ChamelGang | | 2021-Jun 2023 | |
| Chimera | | 2018-Oct 2019 | |
| CIA | | 1947-Sep 2018 | |
| ↳ Subgroup: Longhorn, The Lamberts | | 2009 | |
| ↳ Subgroup: [Unnamed group USA] | | 2019-Mar 2020 | |
| Clever Kitten | | 2013 | |
| CloudSorcerer | [Unknown] | 2024-Jul 2024 | |
| Cold River | | 2019-Oct 2024 | |
| Comment Crew, APT 1 | | 2006-May 2018 | |
| Confucius | | 2013-Aug 2021 | |
| CopyKittens, Slayer Kitten | | 2013-Jan 2017 | |
| Cosmic Leopard, Operation Celestial Force | | 2018 | |
| Covellite | | 2017 | |
| Curious Gorge | | 2022-Apr 2022 | |
| Cutting Kitten, TG-2889 | | 2012-Mar 2016 | |
| Cyber Berkut | | 2014-May 2015 | |
| Dalbit | | 2022 | |
| Dark Caracal | | 2007-2020 | |
| DarkHotel | | 2007-Dec 2021 | |
| DarkHydrus, LazyMeerkat | | 2016-Jan 2019 | |
| Dark Pink | [Unknown] | 2022-Feb 2023 | |
| DarkUniverse | [Unknown] | 2017 | |
| Deceptikons, DeathStalker | [Unknown] | 2012-Jun 2020 | |
| Desert Falcons | [Gaza] | 2011-Oct 2023 | |
| DNSpionage | | 2019-Apr 2019 | |
| Domestic Kitten | | 2016-Oct 2022 | |
| Donot Team | | 2016-Jun 2023 | |
| DragonOK | | 2015-Jan 2017 | |
| DragonSpark | | 2022 | |
| DustSquad, Golden Falcon | | 2014-2020 | |
| Dust Storm | | 2010 | |
| Earth Baxia | | 2024 | |
| Earth Berberoka | | 2022 | |
| Earth Krahang | | 2022 | |
| Earth Lusca | | 2019-Sep 2024 | |
| Earth Wendigo | | 2019 | |
| El Machete | [Unknown] | 2010-Mar 2022 | |
| Emissary Panda, APT 27, LuckyMouse, Bronze Union | | 2010-Aug 2023 | |
| Equation Group | | 2001-Aug 2016 | |
| Evilnum | [Unknown] | 2018-2022 | |
| FamousSparrow | [Unknown] | 2019 | |
| Ferocious Kitten | | 2015 | |
| Fishing Elephant | [Unknown] | 2019 | |
| Flax Typhoon | | 2021-Nov 2023 | |
| Flying Kitten, Ajax Security Team | | 2010-2013 | |
| FunnyDream | | 2018 | |
| Gallium | | 2018-Jun 2022 | |
| Gallmaker | [Unknown] | 2017 | |
| Gamaredon Group | | 2013-Oct 2024 | |
| Gangnam Industrial Style | [Unknown] | 2019 | |
| GCHQ | | 1919-2010 | |
| Gelsemium | | 2014-Mid 2022 | |
| GhostEmperor | | 2020-Sep 2024 | |
| GhostNet, Snooping Dragon | | 2009-2010 | |
| Goblin Panda, Cycldek, Conimes | | 2013-Jun 2020 | |
| GoldenJackal | [Unknown] | 2019-2022 | |
| Gorgon Group | | 2017-Jul 2020 | |
| Grayling | [Unknown] | 2023 | |
| GreenCharlie | | 2020 | |
| Group5 | | 2015 | |
| Hafnium | | 2021-Dec 2021 | |
| Harvester | [Unknown] | 2021 | |
| Hexane | | 2017-Jun 2022 | |
| Hidden Lynx, Aurora Panda | | 2009-2014 | |
| Honeybee | [Unknown] | 2017 | |
| Hurricane Panda | | 2013-Mar 2014 | |
| Hydrochasma | [Unknown] | 2022 | |
| IAmTheKing | | 2018 | |
| Icefog, Dagger Panda | | 2011-2018/2019 | |
| Inception Framework, Cloud Atlas | | 2012-Dec 2023 | |
| IndigoZebra | | 2014 | |
| Infy, Prince of Persia | | 2007-Feb 2017 | |
| InvisiMole | | 2013-Mar 2022 | |
| Iridium | | 2018-Dec 2018 | |
| IronHusky | | 2017-Aug 2021 | |
| ITG18 | | 2013-May 2020 | |
| Karkadann | [Unknown] | 2020 | |
| Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon | | 2010-Late 2022 | |
| Kimsuky, Velvet Chollima | | 2012-Sep 2024 | |
| Lancefly | [Unknown] | 2018 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima | | 2007-Sep 2024 | |
| ↳ Subgroup: Andariel, Silent Chollima | | 2009-Aug 2024 | |
| LazyScripter | [Unknown] | 2018 | |
| Lead | | 2016 | |
| Leafminer, Raspite | | 2017 | |
| leetMX | | 2016 | |
| Leviathan, APT 40, TEMP.Periscope | | 2013-Jul 2021 | |
| Libyan Scorpions | | 2015 | |
| LightBasin | [Unknown] | 2016 | |
| LookBack, TA410 | [Unknown] | 2019-Feb 2022 | |
| Lotus Blossom, Spring Dragon, Thrip | | 2012-Mar 2022 | |
| Lucky Cat | | 2011 | |
| LuminousMoth | | 2020 | |
| Mabna Institute, Cobalt Dickens, Silent Librarian | | 2013-Sep 2020 | |
| Madi | | 2011-Jul 2012 | |
| Magic Hound, APT 35, Cobalt Illusion, Charming Kitten | | 2012-Aug 2024 | |
| Magic Kitten | | 2007 | |
| MalKamak | | 2018 | |
| Mikroceen | | 2017-Mar 2021 | |
| Moafee | | 2014 | |
| Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Jul 2023 | |
| Moonstone Sleet | | 2023-Aug 2024 | |
| MoustachedBouncer | | 2014 | |
| MuddyWater, Seedworm, TEMP.Zagros, Static Kitten | | 2017-May 2024 | |
| Mustang Panda, Bronze President | | 2012-Mar 2024 | |
| Naikon, Lotus Panda | | 2010-Apr 2022 | |
| Nazar | | 2008 | |
| Neodymium | | 2016 | |
| NetTraveler, APT 21, Hammer Panda | | 2004-Dec 2015 | |
| Night Dragon | | 2009 | |
| Nightshade Panda, APT 9, Group 27 | | 2013-Sep 2016 | |
| NineBlog | | 2013 | |
| Nitro, Covert Grove | | 2011-Jul 2014 | |
| OilAlpha | | 2022 | |
| OilRig, APT 34, Helix Kitten, Chrysene | | 2014-Sep 2024 | |
| ↳ Subgroup: Greenbug, Volatile Kitten | | 2016-Oct 2017 | |
| OnionDog | | 2013 | |
| Operation Armor Piercer | | 2020 | |
| Operation Bandidos | [Unknown] | 2021 | |
| Operation BugDrop | | 2016 | |
| Operation Crimson Palace | | 2022 | |
| Operation Diplomatic Specter | | 2022 | |
| Operation Domino, Operation Kremlin | | 2019-Dec 2020 | |
| Operation Dragon Castling | | 2022 | |
| Operation Earth Kitsune | | 2019-Late 2022 | |
| Operation Electric Powder | [Unknown] | 2016 | |
| Operation EmailThief, TEMP_Heretic | | 2021 | |
| Operation Epic Manchego | [Unknown] | 2020 | |
| Operation Ghostwriter | | 2017-Apr 2024 | |
| Operation Ghoul | [Unknown] | 2016 | |
| Operation Groundbait | | 2008 | |
| Operation HangOver, Monsoon, Viceroy Tiger | | 2010-Jan 2020 | |
| Operation Harvest | | 2016 | |
| Operation Jacana | | 2023 | |
| Operation Layover | | 2013 | |
| Operation LiberalFace, MirrorFace | | 2022 | |
| Operation Manul | | 2015 | |
| Operation Olympic Games | | 2007 | |
| Operation Parliament | [Unknown] | 2017 | |
| Operation Poisoned News, TwoSail Junk | | 2020 | |
| Operation Poison Needles | | 2018 | |
| Operation Potao Express | [Unknown] | 2015 | |
| Operation PseudoManuscrypt | | 2021 | |
| Operation Red Signature | | 2018 | |
| Operation RestyLink | [Unknown] | 2021 | |
| Operation RusticWeb | | 2023 | |
| Operation Rusty Flag | [Unknown] | 2023 | |
| Operation Shady RAT | | 2006 | |
| Operation SignSight | [Unknown] | 2020 | |
| Operation SLOW#TEMPEST | | 2024 | |
| Operation Spalax | [Unknown] | 2020 | |
| Operation Titan Rain | | 2003 | |
| Operation Triangulation | [Unknown] | 2023 | |
| Operation TunnelSnake | [Unknown] | 2018 | |
| Operation ViceLeaker | [Unknown] | 2018 | |
| Operation WizardOpium | | 2019 | |
| Orangeworm | [Unknown] | 2015-Jan 2020 | |
| Packrat | [Latin America] | 2008 | |
| Parisite, Fox Kitten, Pioneer Kitten | | 2017-Nov 2020 | |
| PassCV | | 2016 | |
| Patchwork, Dropping Elephant | | 2013-Jul 2024 | |
| PittyTiger, Pitty Panda | | 2011-2014 | |
| Platinum | | 2009-Nov 2019 | |
| Poison Carp, Evil Eye | | 2018-Jun 2023 | |
| Polonium | | 2022-Sep 2022 | |
| Poseidon Group | | 2005-Feb 2016 | |
| PowerPool | [Unknown] | 2018 | |
| Promethium, StrongPity | | 2012-Nov 2021 | |
| Pusikurac | [Unknown] | 2019 | |
| Putter Panda, APT 2 | | 2007 | |
| Rampant Kitten | | 2014 | |
| Rancor | | 2017 | |
| RATicate | [Unknown] | 2019 | |
| Reaper, APT 37, Ricochet Chollima, ScarCruft | | 2012-Sep 2024 | |
| RedAlpha | | 2015-2021 | |
| RedCurl | [Unknown] | 2018-2023 | |
| RedDelta | | 2020-Feb 2022 | |
| RedEcho | | 2020 | |
| RedFoxtrot | | 2014-Aug 2021 | |
| RedGolf | | 2014 | |
| RedHotel, TAG-22 | | 2021 | |
| RevengeHotels | [Unknown] | 2015 | |
| Roaming Tiger | | 2014-Aug 2015 | |
| Rocket Kitten, Newscaster, NewsBeef | | 2011-2017 | |
| Safe | | 2013 | |
| SaintBear, Lorec53 | | 2021-Oct 2022 | |
| Samurai Panda | | 2009 | |
| SandCat | | 2018 | |
| Sandman | | 2022 | |
| Scarab | | 2012-Mar 2022 | |
| Scarlet Mimic | | 2015-Aug 2022 | |
| Sea Turtle | | 2017-2021 | |
| Shadow Academy | [Unknown] | 2020 | |
| Shadow Network | | 2010-2010 | |
| ShaggyPanther | | 2018 | |
| SharpPanda, Sharp Dragon | | 2018-Mar 2024 | |
| ShroudedSnooper | [Unknown] | 2023 | |
| SideCopy | | 2019-Oct 2023 | |
| SideWinder, Rattlesnake | | 2012-Oct 2023 | |
| Siesta | | 2014 | |
| Sima | | 2016 | |
| Slingshot | [Unknown] | 2012 | |
| Snake Wine | | 2016 | |
| Snowglobe, Animal Farm | | 2011 | |
| Sofacy, APT 28, Fancy Bear, Sednit | | 2004-Sep 2024 | |
| Sowbug | [Unknown] | 2015 | |
| Space Pirates | | 2017-Sep 2022 | |
| Sphinx | [Unknown] | 2014 | |
| Stealth Falcon, FruityArmor | | 2012-2023 | |
| Stone Panda, APT 10, menuPass | | 2006-Feb 2022 | |
| Storm-0558 | | 2023 | |
| Strider, ProjectSauron | | 2011 | |
| Suckfly | | 2014-Late 2015 | |
| Sweed | [Unknown] | 2017-2019 | |
| Syrian Electronic Army (SEA), Deadeye Jackal | | 2011-Aug 2021 | |
| ↳ Subgroup: Goldmouse, APT-C-27 | | 2014 | |
| ↳ Subgroup: Pat Bear, APT-C-37 | | 2015 | |
| TA2541 | [Unknown] | 2017 | |
| TA2552 | [Unknown] | 2019 | |
| TA2722 | [Unknown] | 2020 | |
| TA413 | | 2019-2022 | |
| TA428 | | 2013-Jan 2022 | |
| TA459 | | 2017-Apr 2022 | |
| TAG-28 | | 2021 | |
| TAG-38 | | 2021 | |
| TAG-100 | | 2024 | |
| Taidoor | | 2008-Late 2015 | |
| TaskMasters | | 2010-May 2021 | |
| TeamSpy Crew | | 2010-Feb 2017 | |
| Temper Panda, admin@338 | | 2014 | |
| Tempting Cedar Spyware | | 2015 | |
| TIDRONE | [Unknown] | 2024 | |
| ToddyCat | | 2020-2021 | |
| Tomiris | [Unknown] | 2020 | |
| Tonto Team, HartBeat, Karma Panda | | 2009-Apr 2023 | |
| Tortoiseshell, Imperial Kitten | | 2018-Oct 2023 | |
| Tracer Kitten | | 2020 | |
| Transparent Tribe, APT 36 | | 2013-Jun 2024 | |
| Tropical Scorpius, RomCom | | 2019-Jul 2023 | |
| Tropic Trooper, Pirate Panda, APT 23, KeyBoy | | 2011-Jun 2023 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens | | 2010-Oct 2018 | |
| Turla, Waterbug, Venomous Bear | | 1996-Dec 2023 | |
| Twisted Panda | | 2021 | |
| UNC215 | | 2019 | |
| UNC3886 | | 2021-2023 | |
| UNC4191 | | 2022 | |
| UNC5221, UTA0178 | [Unknown] | 2023 | |
| Unfading Sea Haze | | 2018 | |
| Urpage | [Middle East] | 2018 | |
| Velvet Ant | | 2023-Jul 2024 | |
| Vendetta, TA2719 | | 2020 | |
| Vicious Panda | | 2015-Mar 2020 | |
| Void Arachne | | 2024 | |
| Volatile Cedar | | 2012-Early 2020 | |
| Volt Typhoon | | 2020-Jun 2024 | |
| Wassonite | | 2018-Oct 2019 | |
| The White Company | [Unknown] | 2017-Nov 2017 | |
| Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| WildCard | [Unknown] | 2021 | |
| Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| WildPressure | [Unknown] | 2019-Spring 2021 | |
| WindShift | [Unknown] | 2018 | |
| Winnti Group, Wicked Panda | | 2010-Mar 2021 | |
| Winter Vivern | [Unknown] | 2020-Oct 2023 | |
| WIP26 | [Unknown] | 2022 | |
| WIRTE Group | [Middle East] | 2018 | |
| Worok | | 2020 | |
| XDSpy | [Unknown] | 2011-Jul 2024 | |
| xHunt | | 2018-Aug 2019 | |
| YoroTrooper | | 2022 | |
| ZooPark | [Unknown] | 2015 | |
| [Unnamed groups: China] | | 2018-May 2024 | |
| [Unnamed groups: Iran] | | 2019-Sep 2024 | |
| [Unnamed groups: North Korea] | | 2019-Aug 2024 | |
| [Unnamed groups: Russia] | | 2014-Sep 2024 | |
Other groups |
| Bismuth | | 2012 | |
| Dark Basin | | 2013 | |
| GambleForce | | 2023 | |