| Changed | Name | Country | Observed |
APT groups |
| | Aggah | [Unknown] | 2018-Jun 2022 | |
| | APT 17, Deputy Dog, Elderwood, Sneaky Panda |  | 2009-Sep 2017 | |
| | APT 29, Cozy Bear, The Dukes |  | 2008-Aug 2023  |  |
| | APT 31, Judgment Panda, Zirconium | | 2016-Apr 2022 | |
| | Berserk Bear, Dragonfly 2.0 | | 2015-May 2017 | |
| | BlackOasis | [Middle East] | 2015-Oct 2017 | |
| | Bronze Butler, Tick, RedBaldNight, Stalker Panda | | 2006-Apr 2021 | |
| | Buhtrap, Ratopak Spider | | 2015-Jun 2019 | |
| | Calypso | | 2016-Aug 2021 | |
| | Carbanak, Anunak |  | 2013-Apr 2023 | |
| | CardinalLizard | | 2014 | |
| | ChamelGang | | 2021-Jun 2023 | |
| | ↳ Subgroup: [Unnamed group USA] |  | 2019-Mar 2020 | |
| | Circus Spider | [Unknown] | 2019-Feb 2022 | |
| | Cobalt Group | | 2016-Oct 2019 | |
| | Confucius |  | 2013-Aug 2021 | |
| | Corkow, Metel | | 2011 | |
| | Curious Gorge | | 2022-Apr 2022 | |
| | Dark Caracal |  | 2007-2020 | |
| | DarkHotel |  | 2007-Dec 2021 | |
| | DarkUniverse | [Unknown] | 2017 | |
| | Deceptikons, DeathStalker | [Unknown] | 2012-Jun 2020 | |
| | Desert Falcons | [Gaza] | 2011-Sep 2022 | |
| | DragonOK | | 2015-Jan 2017 | |
| | El Machete | [Unknown] | 2010-Mar 2022 | |
| | Emissary Panda, APT 27, LuckyMouse, Bronze Union | | 2010-Aug 2023 | |
| | Energetic Bear, Dragonfly | | 2010-Oct 2020 | |
| | Equation Group | | 2001-Aug 2016 | |
| | Gamaredon Group | | 2013-Jan 2023 | |
| | GCMAN | | 2016 | |
| | Gelsemium | | 2014-Mid 2022 | |
| | Gorgon Group |  | 2017-Jul 2020 | |
| | Hades | | 2017-Oct 2020 | |
| | Hidden Lynx, Aurora Panda | | 2009-2014 | |
| | IAmTheKing | | 2018 | |
| | Icefog, Dagger Panda | | 2011-2018/2019 | |
| | Inception Framework, Cloud Atlas | | 2012-Feb 2022 | |
| | Infy, Prince of Persia |  | 2007-Feb 2017 | |
| | InvisiMole | | 2013-Mar 2022 | |
| | IronHusky | | 2017-Aug 2021 | |
| | Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-Sep 2023 | |
| | Lurk | | 2011-Jun 2016 | |
| | MalKamak | | 2018 | |
| | Mikroceen | | 2017-Mar 2021 | |
| | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Nov 2021 | |
| | MoneyTaker | | 2016 | |
| | MuddyWater, Seedworm, TEMP.Zagros, Static Kitten | | 2017-May 2023 | |
| | Mustang Panda, Bronze President | | 2012-May 2023 | |
| | NB65 | [Unknown] | 2022-Apr 2022 | |
| | NetTraveler, APT 21, Hammer Panda | | 2004-Dec 2015 | |
| | Nitro, Covert Grove | | 2011-Jul 2014 | |
| | OldGremlin | | 2020-Feb 2021 | |
| | Operation BugDrop | | 2016 | |
| | Operation HangOver, Monsoon, Viceroy Tiger | | 2010-Jan 2020 | |
| | Operation Parliament | [Unknown] | 2017 | |
| | Operation Poison Needles | | 2018 | |
| | Operation Potao Express | [Unknown] | 2015 | |
| | PassCV | | 2016 | |
| | Poseidon Group |  | 2005-Feb 2016 | |
| | PowerPool | [Unknown] | 2018 | |
| | Reaper, APT 37, Ricochet Chollima, ScarCruft | | 2012-Sep 2023 | |
| | RedCurl | [Unknown] | 2018-Nov 2022 | |
| | Riddle Spider | [Unknown] | 2020-Jun 2021 | |
| | Roaming Tiger | | 2014-Aug 2015 | |
| | Rocket Kitten, Newscaster, NewsBeef | | 2011-2017 | |
| | RTM | | 2015 | |
| | Safe | | 2013 | |
| | Sandworm Team, Iron Viking, Voodoo Bear | | 2009-Apr 2023 | |
| | Scarab | | 2012-Mar 2022 | |
| | Shadow Network | | 2010-2010 | |
| | Silence, Contract Crew | [Unknown] | 2016-Aug 2022 | |
| | Snowglobe, Animal Farm |  | 2011 | |
| | Space Pirates | | 2017-Sep 2022 | |
| | Strider, ProjectSauron | | 2011 | |
| | Sweed | [Unknown] | 2017-2019 | |
| | TA428 | | 2013-Jan 2022 | |
| | TA459 | | 2017-Apr 2022 | |
| | TaskMasters | | 2010-May 2021 | |
| | TeamSpy Crew | | 2010-Feb 2017 | |
| | ToddyCat | | 2020-2021 | |
| | Tonto Team, HartBeat, Karma Panda | | 2009-Apr 2023 | |
| | Traveling Spider | [Unknown] | 2019-Mar 2021 | |
| | Turla, Waterbug, Venomous Bear | | 1996-Jul 2023 | |
| | Twisted Panda | | 2021 | |
| | Vendetta, TA2719 |  | 2020 | |
| | Vicious Panda | | 2015-Mar 2020 | |
| | Void Balaur | [Unknown] | 2017 | |
| | Volatile Cedar | | 2012-Early 2020 | |
| | Wicked Spider, APT 22 | | 2018 | |
| | Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| | Winnti Group, Blackfly, Wicked Panda | | 2010-Mar 2021 | |
| | XDSpy | [Unknown] | 2011 | |
Other groups |
| | Cron | | 2015-Dec 2017 | |
| | Dark Basin | | 2013 | |
| | Fxmsp |  | 2016-Jul 2020 | |
| | Roaming Mantis | [Unknown] | 2017-Jul 2022 | |
| | TA511 | [Unknown] | 2018-Oct 2020 | |
| | Yingmob | | 2016-Jan 2017 | |
