| Changed | Name | Country | Observed |
APT groups |
| | Anchor Panda, APT 14 |  | 2012 | |
 | APT 3, Gothic Panda, Buckeye | | 2007-Nov 2017 |  |
| | APT 4, Maverick Panda, Wisp Team | | 2007-Oct 2018 | |
| | APT 5, Keyhole Panda | | 2007-Aug 2019 | |
| APT 12, Numbered Panda | | 2009-Nov 2016 | |
| | APT 17, Deputy Dog, Elderwood, Sneaky Panda | | 2009-Jun 2024 | |
| APT 18, Dynamite Panda, Wekby | | 2009-May 2016 | |
| APT 19, Deep Panda, C0d0so0 | | 2013-Mar 2022 | |
| | APT 20, Violin Panda | | 2014-2017 | |
| APT 29, Cozy Bear, The Dukes |  | 2008-Feb 2025 | |
| | APT 30, Override Panda | | 2005 | |
| | APT 32, OceanLotus, SeaLotus |  | 2013-Aug 2024 | |
| | APT 33, Elfin, Magnallium |  | 2013-Apr 2024 | |
| APT 41 | | 2012-Oct 2024 | |
| | ↳ Subgroup: Earth Longzhi | | 2020-Apr 2023 | |
| | Axiom, Group 72 | | 2008-2008/2014 | |
| | Bad Magic, RedStinger | [Unknown] | 2020-May 2023 | |
| | Bookworm | | 2015 | |
| Bronze Butler, Tick, RedBaldNight, Stalker Panda | | 2006-Apr 2021 | |
| | Callisto Group | [Unknown] | 2013 | |
| Cold River | | 2019-Jan 2025 | |
| | Comment Crew, APT 1 | | 2006-May 2018 | |
| | CopyKittens, Slayer Kitten | | 2013-Jan 2017 | |
| | Curious Gorge | | 2022-Apr 2022 | |
| | Cutting Kitten, TG-2889 | | 2012-Mar 2016 | |
| | Cyber Berkut | | 2014-May 2015 | |
| | Cyber Caliphate Army (CCA), United Cyber Caliphate (UCC) | [ISIS] | 2014-Apr 2017 | |
| | Dark Caracal |  | 2007-Jun 2024 | |
| DarkHotel |  | 2007-2023 | |
| | Dark Pink | [Unknown] | 2022-Feb 2023 | |
| | DarkUniverse | [Unknown] | 2017 | |
| Desert Falcons | [Gaza] | 2011-Oct 2023 | |
| | Donot Team |  | 2016-Oct 2024 | |
| | DustSquad, Golden Falcon | | 2014-2020 | |
| | Earth Krahang | | 2022 | |
| | El Machete | [Unknown] | 2010-Mar 2022 | |
| Emissary Panda, APT 27, LuckyMouse, Bronze Union | | 2010-Aug 2023 | |
| | Energetic Bear, Dragonfly | | 2010-Mar 2022 | |
| | Equation Group |  | 2001-Aug 2016 | |
| FIN11 | [Unknown] | 2016-Mar 2025 | |
| | Flying Kitten, Ajax Security Team | | 2010-2013 | |
| | Gallmaker | [Unknown] | 2017 | |
| Gamaredon Group | | 2013-Feb 2025 | |
| | Goblin Panda, Cycldek, Conimes | | 2013-Jun 2020 | |
| Hidden Lynx, Aurora Panda | | 2009-2014 | |
| | IAmTheKing | | 2018 | |
| | Icefog, Dagger Panda | | 2011-2018/2019 | |
| | Inception Framework, Cloud Atlas | | 2012-2024 | |
| | InvisiMole | | 2013-Mar 2022 | |
| | IronHusky | | 2017-Aug 2021 | |
| | ITG18 | | 2013-May 2020 | |
| Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon | | 2010-Oct 2024 | |
| Kimsuky, Velvet Chollima |  | 2012-Jun 2025  | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima | | 2007-May 2025 | |
| Leviathan, APT 40, TEMP.Periscope | | 2013-Jul 2021 | |
| LockBit Gang | [Unknown] | 2019-May 2025 | |
| Lotus Blossom, Spring Dragon, Thrip | | 2012-Aug 2024 | |
| | Lucky Cat | | 2011 | |
| Magic Hound, APT 35, Cobalt Illusion, Charming Kitten | | 2012-Jun 2025 | |
| | ↳ Subgroup: TA455, Smoke Sandstorm | | 2021-Sep 2023 | |
| | Mikroceen | | 2017-Mar 2021 | |
| | Moafee | | 2014 | |
| | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Jul 2023 | |
| | MuddyWater, Seedworm, TEMP.Zagros, Static Kitten | | 2017-May 2024 | |
| | Naikon, Lotus Panda | | 2010-Apr 2022 | |
| | NetTraveler, APT 21, Hammer Panda | | 2004-Dec 2015 | |
| | OilRig, APT 34, Helix Kitten, Chrysene | | 2014-Sep 2024 | |
| | Operation Armor Piercer |  | 2020 | |
| | Operation Diplomatic Specter | | 2022 | |
| Operation Ghostwriter |  | 2017-Jan 2025 | |
| | Operation HangOver, Monsoon, Viceroy Tiger | | 2010-Jan 2020 | |
| | Operation Parliament | [Unknown] | 2017 | |
| | Operation PseudoManuscrypt | | 2021 | |
| | Operation RusticWeb | | 2023 | |
| | Operation Titan Rain | | 2003 | |
| | Parisite, Fox Kitten, Pioneer Kitten | | 2017-Nov 2020 | |
| | Patchwork, Dropping Elephant | | 2013-Jul 2024 | |
| | PittyTiger, Pitty Panda | | 2011-2014 | |
| | Platinum | | 2009-Nov 2019 | |
| Polonium | | 2022-Sep 2022 | |
| | Putter Panda, APT 2 | | 2007 | |
| | RedFoxtrot | | 2014-Aug 2021 | |
| | Rocket Kitten, Newscaster, NewsBeef | | 2011-2017 | |
| | Samurai Panda | | 2009 | |
| Sea Turtle |  | 2017-2021 | |
| SideWinder, Rattlesnake | | 2012-2024 | |
| | Siesta | | 2014 | |
| | Snowglobe, Animal Farm |  | 2011 | |
| Sofacy, APT 28, Fancy Bear, Sednit | | 2004-Apr 2025 | |
| Stone Panda, APT 10, menuPass | | 2006-Mar 2025 | |
| | Strider, ProjectSauron | | 2011 | |
| | Sweed | [Unknown] | 2017-2019 | |
| | Syrian Electronic Army (SEA), Deadeye Jackal |  | 2011-Aug 2021 | |
| | ↳ Subgroup: Pat Bear, APT-C-37 | | 2015 | |
| | TA2541 | [Unknown] | 2017 | |
| | Temper Panda, admin@338 | | 2014 | |
| | TIDRONE | [Unknown] | 2024-2024 | |
| ToddyCat | | 2020-2024 | |
| | Tonto Team, HartBeat, Karma Panda | | 2009-Apr 2023 | |
| Tortoiseshell, Imperial Kitten | | 2018-Oct 2023 | |
| Transparent Tribe, APT 36 | | 2013-Mar 2025 | |
| | Tropic Trooper, Pirate Panda, APT 23, KeyBoy | | 2011-Jun 2023 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens | | 2010-Oct 2018 | |
| | Turla, Waterbug, Venomous Bear | | 1996-Dec 2023 | |
| | Twisted Panda | | 2021 | |
| | Unfading Sea Haze | | 2018 | |
| Void Blizzard | | 2024 | |
| | The White Company | [Unknown] | 2017-Nov 2017 | |
| | Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| Winnti Group, Wicked Panda | | 2010-Mar 2021 | |
| | Winter Vivern | [Unknown] | 2020-Oct 2023 | |
| | WIRTE Group | [Middle East] | 2018-Feb 2024 | |
| Wizard Spider, Gold Blackburn | | 2014-May 2025 | |
| | [Unnamed groups: China] | | 2018-Mar 2025 | |
Other groups |
| | Achilles | [Unknown] | 2018-Oct 2018 | |
| | Mummy Spider, TA542 | [Unknown] | 2014-Jun 2024 | |
| NetSec, USDoD |  | 2020-Oct 2024 | |
