| Changed | Name | Country | Observed |
APT groups |
| | Antlion |  | 2011 | |
| | APT 16, SVCMONDR | | 2015 | |
| | APT 17, Deputy Dog, Elderwood, Sneaky Panda | | 2009-Jun 2024 | |
 | APT 19, Deep Panda, C0d0so0 | | 2013-Mar 2022 |  |
| | APT 20, Violin Panda | | 2014-2017 | |
| APT 29, Cozy Bear, The Dukes |  | 2008-Feb 2025 | |
| | APT 32, OceanLotus, SeaLotus |  | 2013-Aug 2024 | |
| | APT 33, Elfin, Magnallium |  | 2013-Apr 2024 | |
| APT 41 | | 2012-Oct 2024 | |
| | ↳ Subgroup: Earth Longzhi | | 2020-Apr 2023 | |
| BlackTech, Circuit Panda, Radio Panda | | 2010-Oct 2020 | |
| | Blind Eagle |  | 2018-Nov 2024 | |
| | Blue Termite, Cloudy Omega | | 2013 | |
| | Buhtrap, Ratopak Spider | | 2015-Jun 2019 | |
| | Carbanak, Anunak |  | 2013-Apr 2023 | |
| | ↳ Subgroup: Longhorn, The Lamberts |  | 2009 | |
| | Cobalt Group | | 2016-Oct 2019 | |
| | Comment Crew, APT 1 | | 2006-May 2018 | |
| | Corkow, Metel | | 2011 | |
| | Cutting Kitten, TG-2889 | | 2012-Mar 2016 | |
| | Cyber Berkut | | 2014-May 2015 | |
| | Dark Caracal |  | 2007-Jun 2024 | |
| | DarkCasino | [Unknown] | 2021 | |
| | Deceptikons, DeathStalker | [Unknown] | 2012-Jun 2020 | |
| | Earth Krahang | | 2022 | |
| Earth Lamia | | 2023 | |
| | Elephant Beetle | [Unknown] | 2020 | |
| | EmpireMonkey, CobaltGoblin | [Unknown] | 2018-Mar 2021 | |
| | Evilnum | [Unknown] | 2018-2022 | |
| | FIN4, Wolf Spider |  | 2013 | |
| FIN7 | | 2013-Jul 2024 | |
| FIN8 | [Unknown] | 2016-Dec 2022 | |
| FIN11 | [Unknown] | 2016-Mar 2025 | |
| | FIN12 | [Unknown] | 2018 | |
| | Gallium | | 2018-Jun 2022 | |
| | GCMAN | | 2016 | |
| | GhostNet, Snooping Dragon | | 2009-2010 | |
| | Hades | | 2017-Oct 2020 | |
| Hidden Lynx, Aurora Panda | | 2009-2014 | |
| | Inception Framework, Cloud Atlas | | 2012-2024 | |
| Indrik Spider | | 2007-Oct 2024 | |
| | IronHusky | | 2017-Aug 2021 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-May 2025  | |
| | ↳ Subgroup: BeagleBoyz | | 2014-Feb 2016 | |
| | Leafminer, Raspite | | 2017 | |
| | LightBasin | | 2016 | |
| LockBit Gang | [Unknown] | 2019-May 2025 | |
| | Lurk | | 2011-Jun 2016 | |
| | Madi | | 2011-Jul 2012 | |
| Magic Hound, APT 35, Cobalt Illusion, Charming Kitten | | 2012-Jun 2025 | |
| | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Jul 2023 | |
| | MoneyTaker | | 2016 | |
| | MuddyWater, Seedworm, TEMP.Zagros, Static Kitten | | 2017-May 2024 | |
| | OilRig, APT 34, Helix Kitten, Chrysene | | 2014-Sep 2024 | |
| | OldGremlin | | 2020-Feb 2021 | |
| | OPERA1ER | [Unknown] | 2016-Jul 2023 | |
| | Operation Black Atlas | [Unknown] | 2015 | |
| | Operation Parliament | [Unknown] | 2017 | |
| | Operation SalmonSlalom | | 2025 | |
| | Parisite, Fox Kitten, Pioneer Kitten | | 2017-Nov 2020 | |
| | Patchwork, Dropping Elephant |  | 2013-Jul 2024 | |
| | Platinum | | 2009-Nov 2019 | |
| | Poseidon Group |  | 2005-Feb 2016 | |
| Reaper, APT 37, Ricochet Chollima, ScarCruft | | 2012-Mar 2025 | |
| | RedCurl | [Unknown] | 2018-Mar 2025 | |
| | SaintBear, Lorec53 | | 2021-Oct 2022 | |
| | Siesta | | 2014 | |
| | Silence, Contract Crew | [Unknown] | 2016-Aug 2022 | |
| Sofacy, APT 28, Fancy Bear, Sednit | | 2004-Apr 2025 | |
| Stone Panda, APT 10, menuPass | | 2006-Mar 2025 | |
| | Strider, ProjectSauron | | 2011 | |
| | Suckfly | | 2014-Late 2015 | |
| | Sweed | [Unknown] | 2017-2019 | |
| | TA2101, Maze Team | [Unknown] | 2019-Feb 2024 | |
| | TA2722 | [Unknown] | 2020 | |
| | TA459 | | 2017-Apr 2022 | |
| | TA505, Graceful Spider, Gold Evergreen | | 2006-Nov 2022 | |
| | TA530 | [Unknown] | 2016-Nov 2016 | |
| | TA558 | [Unknown] | 2018-Jun 2023 | |
| | TAG-100 | | 2024 | |
| | TeleBots | | 2015-Oct 2020 | |
| | Temper Panda, admin@338 | | 2014 | |
| | Tonto Team, HartBeat, Karma Panda | | 2009-Apr 2023 | |
| Tropical Scorpius, RomCom | | 2019-Oct 2024 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens | | 2010-Oct 2018 | |
| | UNC2891 | [Unknown] | 2020 | |
| Venom Spider, Golden Chickens | | 2017-Jan 2025 | |
| | Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| Winnti Group, Wicked Panda | | 2010-Mar 2021 | |
| Wizard Spider, Gold Blackburn | | 2014-May 2025 | |
| | Worok | | 2020 | |
| | YoroTrooper |  | 2022 | |
| [Unnamed groups: Russia] | | 2014-May 2025 | |
Other groups |
| | Bamboo Spider, TA544 | [Unknown] | 2016-Apr 2022 | |
| | Bismuth | | 2012 | |
| | Boson Spider | [Unknown] | 2015-Nov 2017 | |
| | Cron | | 2015-Dec 2017 | |
| | Cyber fighters of Izz Ad-Din Al Qassam, Fraternal Jackal | | 2012-May 2016 | |
| | Dark Basin | | 2013 | |
| | Fxmsp | | 2016-Jul 2020 | |
| | Lunar Spider | | 2019 | |
| | Moses Staff | | 2021-Nov 2022 | |
| | Mummy Spider, TA542 | [Unknown] | 2014-Jun 2024 | |
| | ResumeLooters | [Unknown] | 2023 | |
| | Retefe Gang, Operation Emmental | | 2013 | |
| | Scully Spider, TA547 | [Unknown] | 2017-Mar 2024 | |
| | Shark Spider | | 2011-Jul 2014 | |
| | TA554 | [Unknown] | 2017 | |
