| Changed | Name | Country | Observed |
APT groups |
| | Aggah | [Unknown] | 2018-Jun 2022 | |
 | APT 29, Cozy Bear, The Dukes |  | 2008-Feb 2025 |  |
| | APT 30, Override Panda |  | 2005 | |
| | APT 32, OceanLotus, SeaLotus |  | 2013-Aug 2024 | |
| APT 41 | | 2012-Oct 2024 | |
| Bitter | [South Asia] | 2013-Nov 2024 | |
| Bronze Highland | | 2012-Jul 2024 | |
| | Calypso | | 2016-Aug 2021 | |
| | Carbanak, Anunak |  | 2013-Apr 2023 | |
| | ChamelGang | | 2021-Jun 2023 | |
| | Circus Spider | [Unknown] | 2019-Dec 2024 | |
| Cold River | | 2019-Jan 2025 | |
| | Comment Crew, APT 1 | | 2006-May 2018 | |
| | Confucius |  | 2013-Aug 2021 | |
| | Cosmic Leopard, Operation Celestial Force |  | 2018 | |
| | CostaRicto | [Unknown] | 2017 | |
| | Cutting Kitten, TG-2889 |  | 2012-Mar 2016 | |
| | Dark Caracal |  | 2007-Jun 2024 | |
| DarkHotel |  | 2007-2023 | |
| | Deceptikons, DeathStalker | [Unknown] | 2012-Jun 2020 | |
| Desert Falcons | [Gaza] | 2011-Oct 2023 | |
| | Donot Team | | 2016-Oct 2024 | |
| | Earth Krahang | | 2022 | |
| Earth Lamia | | 2023 | |
| Emissary Panda, APT 27, LuckyMouse, Bronze Union | | 2010-Aug 2023 | |
| | Equation Group |  | 2001-Aug 2016 | |
| Gamaredon Group | | 2013-Feb 2025 | |
| | GhostNet, Snooping Dragon | | 2009-2010 | |
| | Goblin Panda, Cycldek, Conimes | | 2013-Jun 2020 | |
| Hidden Lynx, Aurora Panda | | 2009-2014 | |
| | Icefog, Dagger Panda | | 2011-2018/2019 | |
| | Inception Framework, Cloud Atlas | | 2012-2024 | |
| | Infy, Prince of Persia | | 2007-Feb 2017 | |
| Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon | | 2010-Oct 2024 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-May 2025  | |
| | ↳ Subgroup: BeagleBoyz | | 2014-Feb 2016 | |
| | Lucky Cat | | 2011 | |
| | ↳ Subgroup: TA455, Smoke Sandstorm | | 2021-Sep 2023 | |
| | Magic Kitten | | 2007 | |
| | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Jul 2023 | |
| | MuddyWater, Seedworm, TEMP.Zagros, Static Kitten | | 2017-May 2024 | |
| Mustang Panda, Bronze President | | 2012-Jun 2025 | |
| | Naikon, Lotus Panda | | 2010-Apr 2022 | |
| | NetTraveler, APT 21, Hammer Panda | | 2004-Dec 2015 | |
| | Nitro, Covert Grove | | 2011-Jul 2014 | |
| | Operation Armor Piercer | | 2020 | |
| | Operation Black Atlas | [Unknown] | 2015 | |
| | Operation Ghoul | [Unknown] | 2016 | |
| | Operation HangOver, Monsoon, Viceroy Tiger | | 2010-Jan 2020 | |
| | Operation Parliament | [Unknown] | 2017 | |
| | Operation RusticWeb | | 2023 | |
| | Operation Shady RAT | | 2006 | |
| | Orangeworm | [Unknown] | 2015-Jan 2020 | |
| | Platinum | | 2009-Nov 2019 | |
| | Poseidon Group |  | 2005-Feb 2016 | |
| | PowerPool | [Unknown] | 2018 | |
| Promethium, StrongPity |  | 2012-Nov 2021 | |
| Reaper, APT 37, Ricochet Chollima, ScarCruft | | 2012-Mar 2025 | |
| | RedAlpha | | 2015-2021 | |
| | RedDelta | | 2020-Jul 2023 | |
| | RedEcho | | 2020 | |
| | RedFoxtrot | | 2014-Aug 2021 | |
| | RedHotel, TAG-22 | | 2021-2022 | |
| | Riddle Spider | [Unknown] | 2020-Jun 2021 | |
| | Rocket Kitten, Newscaster, NewsBeef | | 2011-2017 | |
| | Safe | | 2013 | |
| Salt Typhoon, GhostEmperor | | 2020-Feb 2025 | |
| Sandworm Team, Iron Viking, Voodoo Bear | | 2009-Dec 2024 | |
| | Shadow Network | | 2010-2010 | |
| SideCopy | | 2019-Dec 2024 | |
| | Silence, Contract Crew | [Unknown] | 2016-Aug 2022 | |
| Sofacy, APT 28, Fancy Bear, Sednit | | 2004-Apr 2025 | |
| Stone Panda, APT 10, menuPass | | 2006-Mar 2025 | |
| | Suckfly | | 2014-Late 2015 | |
| | Sweed | [Unknown] | 2017-2019 | |
| | TA558 | [Unknown] | 2018-Jun 2023 | |
| | TAG-28 | | 2021 | |
| | TAG-38 | | 2021 | |
| | TeamSpy Crew | | 2010-Feb 2017 | |
| ToddyCat | | 2020-2024 | |
| | Tonto Team, HartBeat, Karma Panda | | 2009-Apr 2023 | |
| Transparent Tribe, APT 36 | | 2013-Mar 2025 | |
| | Traveling Spider | [Unknown] | 2019-Mar 2021 | |
| | Tropic Trooper, Pirate Panda, APT 23, KeyBoy | | 2011-Jun 2023 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens | | 2010-Oct 2018 | |
| | Turla, Waterbug, Venomous Bear | | 1996-Dec 2023 | |
| | Void Balaur | [Unknown] | 2017 | |
| | Volt Typhoon | | 2020-Jun 2024 | |
| | Wassonite | | 2018-Oct 2019 | |
| | Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| Winnti Group, Wicked Panda | | 2010-Mar 2021 | |
| | Winter Vivern | [Unknown] | 2020-Oct 2023 | |
| | [Unnamed groups: Iran] | | 2019-Jan 2025 | |
Other groups |
| | ALTDOS, Desorden |  | 2020-Feb 2025 | |
| | CoralRaider | | 2023-Feb 2024 | |
| | Dark Basin | | 2013 | |
| | Fxmsp |  | 2016-Jul 2020 | |
| | GambleForce | | 2023 | |
| | Moses Staff | | 2021-Nov 2022 | |
| | ResumeLooters | [Unknown] | 2023 | |
| | Roaming Mantis | [Unknown] | 2017-Jul 2022 | |
| | TA511 | [Unknown] | 2018-Oct 2020 | |
| | Yingmob | | 2016-Jan 2017 | |
