Changed | Name | Country | Observed |
APT groups |
| Aggah | [Unknown] | 2018-Jun 2022 | |
| Anchor Panda, APT 14 |  | 2012 | |
| APT 12, Numbered Panda |  | 2009-Nov 2016 | |
| APT 17, Deputy Dog, Elderwood, Sneaky Panda |  | 2009-Sep 2017 | |
| APT 20, Violin Panda |  | 2014-2017 | |
 | APT 29, Cozy Bear, The Dukes |  | 2008-Sep 2023  |  |
| APT 32, OceanLotus, SeaLotus |  | 2013-Dec 2020 |  |
| Berserk Bear, Dragonfly 2.0 |  | 2015-May 2017 | |
| Cadelle |  | 2011 | |
| Carbanak, Anunak |  | 2013-Apr 2023 |  |
| Careto, The Mask | [Unknown] | 2007-Feb 2014 |  |
| Circus Spider | [Unknown] | 2019-Feb 2022 |  |
| CopyKittens, Slayer Kitten |  | 2013-Jan 2017 | |
| Corkow, Metel |  | 2011 | |
| Cutting Kitten, TG-2889 |  | 2012-Mar 2016 |  |
| Cyber Berkut |  | 2014-May 2015 | |
| Dark Caracal |  | 2007-2020 | |
| DarkHotel |  | 2007-Dec 2021 | |
 | Desert Falcons | [Gaza] | 2011-Oct 2023  |  |
| Doppel Spider |  | 2019-Sep 2023  |  |
| Earth Lusca |  | 2019-Early 2023 | |
| El Machete | [Unknown] | 2010-Mar 2022 | |
| Emissary Panda, APT 27, LuckyMouse, Bronze Union |  | 2010-Aug 2023 | |
| Energetic Bear, Dragonfly |  | 2010-Oct 2020 |  |
| Equation Group |  | 2001-Aug 2016 |  |
| Gamaredon Group |  | 2013-Jan 2023 | |
| Gangnam Industrial Style | [Unknown] | 2019 | |
| GhostNet, Snooping Dragon |  | 2009-2010 |  |
| Hidden Lynx, Aurora Panda |  | 2009-2014 |  |
| Icefog, Dagger Panda |  | 2011-2018/2019 | |
| Inception Framework, Cloud Atlas |  | 2012-Feb 2022 | |
| Infy, Prince of Persia |  | 2007-Feb 2017 |  |
| Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon |  | 2010-Late 2022 | |
 | Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-Nov 2023  |  |
 | Leviathan, APT 40, TEMP.Periscope |  | 2013-Jul 2021 |  |
| Magic Kitten |  | 2007 | |
 | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Jul 2023 | |
 | Mustang Panda, Bronze President |  | 2012-Aug 2023 | |
| NetTraveler, APT 21, Hammer Panda |  | 2004-Dec 2015 | |
| Nitro, Covert Grove |  | 2011-Jul 2014 | |
| Operation Black Atlas | [Unknown] | 2015 | |
| Operation Epic Manchego | [Unknown] | 2020 | |
| Operation Ghostwriter |  | 2017-Apr 2022 |  |
| Operation Ghoul | [Unknown] | 2016 | |
 | Operation HangOver, Monsoon, Viceroy Tiger |  | 2010-Jan 2020 | |
| Operation Parliament | [Unknown] | 2017 | |
| Operation Shady RAT |  | 2006 | |
| Orangeworm | [Unknown] | 2015-Jan 2020 | |
| Parisite, Fox Kitten, Pioneer Kitten |  | 2017-Nov 2020 | |
| PowerPool | [Unknown] | 2018 | |
| Promethium, StrongPity |  | 2012-Nov 2021 | |
| RedCurl | [Unknown] | 2018-Nov 2022 | |
| RedDelta |  | 2020-Feb 2022 | |
| Riddle Spider | [Unknown] | 2020-Jun 2021 | |
| Rocket Kitten, Newscaster, NewsBeef |  | 2011-2017 | |
| RTM |  | 2015 | |
| Shadow Network |  | 2010-2010 |  |
| Silence, Contract Crew | [Unknown] | 2016-Aug 2022 | |
| Snowglobe, Animal Farm |  | 2011 | |
 | Sofacy, APT 28, Fancy Bear, Sednit |  | 2004-Sep 2023  |  |
| Stone Panda, APT 10, menuPass |  | 2006-Feb 2022 |  |
| Sweed | [Unknown] | 2017-2019 | |
| TA2101, Maze Team | [Unknown] | 2019-Feb 2022 |  |
| TeamSpy Crew |  | 2010-Feb 2017 | |
| Tempting Cedar Spyware |  | 2015 | |
| Tortilla | [Unknown] | 2021 | |
| Transparent Tribe, APT 36 |  | 2013-Apr 2023 | |
| Traveling Spider | [Unknown] | 2019-Mar 2021 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens |  | 2010-Oct 2018 |  |
 | Turla, Waterbug, Venomous Bear |  | 1996-Jul 2023 | |
| Void Balaur | [Unknown] | 2017 | |
| Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| Wicked Spider, APT 22 |  | 2018 | |
| Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| Winnti Group, Blackfly, Wicked Panda |  | 2010-Mar 2021 | |
Other groups |
| Bamboo Spider, TA544 | [Unknown] | 2016-Apr 2022 |  |
| Cron |  | 2015-Dec 2017 |  |
| Dark Basin |  | 2013 | |
| Fxmsp |  | 2016-Jul 2020 |  |
| Moses Staff |  | 2021-Nov 2022 | |
| Retefe Gang, Operation Emmental |  | 2013 | |
| Roaming Mantis | [Unknown] | 2017-Jul 2022 | |
| Scully Spider, TA547 | [Unknown] | 2017-Sep 2019 | |
| TA511 | [Unknown] | 2018-Oct 2020 | |