Changed | Name | Country | Observed |
APT groups |
| Antlion |  | 2011 | |
| APT 16, SVCMONDR |  | 2015 | |
| APT 17, Deputy Dog, Elderwood, Sneaky Panda |  | 2009-Sep 2017 | |
| APT 19, Deep Panda, C0d0so0 |  | 2013-Mar 2022 |  |
| APT 20, Violin Panda |  | 2014-2017 | |
| APT 29, Cozy Bear, The Dukes |  | 2008-Aug 2023  |  |
| APT 32, OceanLotus, SeaLotus |  | 2013-Dec 2020 |  |
| APT 33, Elfin, Magnallium |  | 2013-Feb 2023 | |
| APT 41 |  | 2012-Feb 2023 |  |
| ↳ Subgroup: Earth Longzhi |  | 2020-Apr 2023 | |
| BlackTech, Circuit Panda, Radio Panda |  | 2010-Oct 2020 | |
| Blind Eagle |  | 2018-Feb 2023 | |
| Blue Termite, Cloudy Omega |  | 2013 | |
| Buhtrap, Ratopak Spider |  | 2015-Jun 2019 | |
| Carbanak, Anunak |  | 2013-Apr 2023 |  |
| ↳ Subgroup: Longhorn, The Lamberts |  | 2009 | |
| Cobalt Group |  | 2016-Oct 2019 |  |
| Comment Crew, APT 1 |  | 2006-May 2018 |  |
| Corkow, Metel |  | 2011 | |
| Cutting Kitten, TG-2889 |  | 2012-Mar 2016 |  |
| Cyber Berkut |  | 2014-May 2015 | |
| Dark Caracal |  | 2007-2020 | |
| Deceptikons, DeathStalker | [Unknown] | 2012-Jun 2020 | |
| Elephant Beetle | [Unknown] | 2020 | |
| EmpireMonkey, CobaltGoblin | [Unknown] | 2018-Mar 2021 |  |
| Evilnum | [Unknown] | 2018-2022 | |
| FIN4, Wolf Spider |  | 2013 | |
| FIN7 |  | 2013-Mar 2023 |  |
| FIN8 | [Unknown] | 2016-Dec 2022 | |
| FIN11 | [Unknown] | 2016-Sep 2023  |  |
| FIN12 | [Unknown] | 2018 | |
| Gallium |  | 2018-Jun 2022 | |
| GCMAN |  | 2016 | |
| GhostNet, Snooping Dragon |  | 2009-2010 |  |
| Hades |  | 2017-Oct 2020 |  |
| Hidden Lynx, Aurora Panda |  | 2009-2014 |  |
| Inception Framework, Cloud Atlas |  | 2012-Feb 2022 | |
| Indrik Spider |  | 2007-Dec 2021 |  |
| IronHusky |  | 2017-Aug 2021 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-Sep 2023  |  |
| ↳ Subgroup: BeagleBoyz |  | 2014-Feb 2016 | |
| Leafminer, Raspite |  | 2017 | |
| LightBasin | [Unknown] | 2016 | |
| LockBit Gang | [Unknown] | 2019-Sep 2023  |  |
| Lurk |  | 2011-Jun 2016 |  |
| Madi |  | 2011-Jul 2012 | |
| Magic Hound, APT 35, Cobalt Illusion, Charming Kitten |  | 2012-Aug 2023  |  |
| Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Nov 2021 | |
| MoneyTaker |  | 2016 | |
| MuddyWater, Seedworm, TEMP.Zagros, Static Kitten |  | 2017-May 2023 |  |
| OilRig, APT 34, Helix Kitten, Chrysene |  | 2014-Aug 2023  |  |
| OldGremlin |  | 2020-Feb 2021 | |
| OPERA1ER | [Unknown] | 2016-Jul 2023 |  |
| Operation Black Atlas | [Unknown] | 2015 | |
| Operation Parliament | [Unknown] | 2017 | |
| Parisite, Fox Kitten, Pioneer Kitten |  | 2017-Nov 2020 | |
| Patchwork, Dropping Elephant |  | 2013-Jul 2023 | |
| Platinum |  | 2009-Nov 2019 | |
| Poseidon Group |  | 2005-Feb 2016 |  |
| Reaper, APT 37, Ricochet Chollima, ScarCruft |  | 2012-Sep 2023  |  |
| RedCurl | [Unknown] | 2018-Nov 2022 | |
| SaintBear, Lorec53 |  | 2021-Oct 2022 | |
| Siesta |  | 2014 | |
| Silence, Contract Crew | [Unknown] | 2016-Aug 2022 | |
| Sofacy, APT 28, Fancy Bear, Sednit |  | 2004-Sep 2023  |  |
| Stone Panda, APT 10, menuPass |  | 2006-Feb 2022 |  |
| Strider, ProjectSauron |  | 2011 | |
| Suckfly |  | 2014-Late 2015 | |
| Sweed | [Unknown] | 2017-2019 | |
| TA2101, Maze Team | [Unknown] | 2019-Feb 2022 |  |
| TA2722 | [Unknown] | 2020 | |
| TA459 |  | 2017-Apr 2022 | |
| TA505, Graceful Spider, Gold Evergreen |  | 2006-Nov 2022 |  |
| TA530 | [Unknown] | 2016-Nov 2016 | |
| TeleBots |  | 2015-Oct 2020 |  |
| Temper Panda, admin@338 |  | 2014 | |
| Tonto Team, HartBeat, Karma Panda |  | 2009-Apr 2023 | |
| Tropical Scorpius, RomCom |  | 2019-Jul 2023 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens |  | 2010-Oct 2018 |  |
| UNC2891 | [Unknown] | 2020 | |
| Venom Spider, Golden Chickens |  | 2017-Feb 2019 | |
| Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| Winnti Group, Blackfly, Wicked Panda |  | 2010-Mar 2021 | |
| Wizard Spider, Gold Blackburn |  | 2014-Sep 2023  |  |
| Worok |  | 2020 | |
Other groups |
| Bamboo Spider, TA544 | [Unknown] | 2016-Apr 2022 |  |
| Bismuth |  | 2012 | |
| Boson Spider | [Unknown] | 2015-Nov 2017 | |
| Cron |  | 2015-Dec 2017 |  |
| Cyber fighters of Izz Ad-Din Al Qassam, Fraternal Jackal |  | 2012-May 2016 |  |
| Dark Basin |  | 2013 | |
| Fxmsp |  | 2016-Jul 2020 |  |
| Lunar Spider |  | 2019 | |
| Moses Staff |  | 2021-Nov 2022 | |
| Mummy Spider, TA542 | [Unknown] | 2014-Nov 2022 |  |
| Retefe Gang, Operation Emmental |  | 2013 | |
| Scully Spider, TA547 | [Unknown] | 2017-Sep 2019 | |
| Shark Spider |  | 2011-Jul 2014 |  |
| TA554 | [Unknown] | 2017 | |