| Changed | Name | Country | Observed |
APT groups |
| | Aggah | [Unknown] | 2018-Oct 2021 | |
| | Allanite | [Unknown] | 2017 | |
| | Anchor Panda, APT 14 |  | 2012 | |
| | APT 3, Gothic Panda, Buckeye | | 2007-Nov 2017 |  |
| | APT 17, Deputy Dog, Elderwood, Sneaky Panda | | 2009-Sep 2017 | |
| | APT 20, Violin Panda | | 2014-2017 | |
 | APT 29, Cozy Bear, The Dukes |  | 2008-Feb 2022  | |
| | APT 32, OceanLotus, SeaLotus |  | 2013-Dec 2020 | |
| | APT 33, Elfin, Magnallium |  | 2013-Nov 2019 | |
| | APT 41 | | 2012-Aug 2021 | |
| | AVIVORE | | 2015 | |
| | Berserk Bear, Dragonfly 2.0 | | 2015-May 2017 | |
| | BlackOasis | [Middle East] | 2015-Oct 2017 | |
| | Cadelle | | 2011 | |
| | Carbanak, Anunak |  | 2013-Nov 2021 | |
| | Careto, The Mask | [Unknown] | 2007-Feb 2014 | |
| | Cobalt Group | | 2016-Oct 2019 | |
| | Comment Crew, APT 1 | | 2006-May 2018 | |
| | Confucius |  | 2013-Aug 2021 | |
| | Corkow, Metel | | 2011 | |
| | Cutting Kitten, TG-2889 | | 2012-Mar 2016 | |
| | Cyber Caliphate Army (CCA), United Cyber Caliphate (UCC) | [ISIS] | 2014-Apr 2017 | |
| | DarkHotel |  | 2007-Dec 2021 | |
| | Domestic Kitten | | 2016-Nov 2020 | |
| | Donot Team | [Unknown] | 2018-2020 | |
| | Doppel Spider | | 2019-Oct 2021 | |
| | El Machete | [Unknown] | 2010-Mar 2022 | |
| | Emissary Panda, APT 27, LuckyMouse, Bronze Union | | 2010-Mar 2021 | |
| | Energetic Bear, Dragonfly | | 2010-Oct 2020 | |
| | Equation Group |  | 2001-Aug 2016 | |
| | Evilnum | [Unknown] | 2018-Aug 2020 | |
| | FamousSparrow | [Unknown] | 2019 | |
| | FIN7 | | 2013-Jan 2022 | |
| | FIN11 | [Unknown] | 2016-Nov 2021 | |
| | FIN12 | [Unknown] | 2018 | |
| Gamaredon Group | | 2013-Apr 2022 | |
| | Gangnam Industrial Style | [Unknown] | 2019 | |
| | GCHQ |  | 1919-2010 | |
| | Gorgon Group |  | 2017-Jul 2020 | |
| | Hidden Lynx, Aurora Panda | | 2009-2014 | |
| | Icefog, Dagger Panda | | 2011-2018/2019 | |
| | Infy, Prince of Persia | | 2007-Feb 2017 | |
| | Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon | | 2010-May 2020 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-Apr 2022 | |
| | Leviathan, APT 40, TEMP.Periscope | | 2013-Jul 2021 | |
| LockBit Gang | [Unknown] | 2019-Apr 2022 | |
| | Mabna Institute, Cobalt Dickens, Silent Librarian | | 2013-Sep 2020 | |
| | Magic Hound, APT 35, Cobalt Gypsy, Charming Kitten | | 2012-Early 2022 | |
| | Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Nov 2021 | |
| | MoneyTaker | | 2016 | |
| Mustang Panda, Bronze President | | 2014-Mar 2022 | |
| | NetTraveler, APT 21, Hammer Panda | | 2004-Dec 2015 | |
| | Nitro, Covert Grove | | 2011-Jul 2014 | |
| | OilRig, APT 34, Helix Kitten, Chrysene | | 2014-Jan 2021 | |
| | Operation Black Atlas | [Unknown] | 2015 | |
| | Operation Epic Manchego | [Unknown] | 2020 | |
| | Operation Ghoul | [Unknown] | 2016 | |
| | Operation HangOver, Monsoon, Viceroy Tiger | | 2010-Jan 2020 | |
| | Operation Parliament | [Unknown] | 2017 | |
| | Operation Shady RAT | | 2006 | |
| | Operation Titan Rain | | 2003 | |
| | Orangeworm | [Unknown] | 2015-Jan 2020 | |
| | Patchwork, Dropping Elephant | | 2013-Nov 2021 | |
| | PowerPool | [Unknown] | 2018 | |
| | RATicate | [Unknown] | 2019 | |
| Reaper, APT 37, Ricochet Chollima, ScarCruft | | 2012-Mar 2022 | |
| | RedCurl | [Unknown] | 2018-2021 | |
| | Riddle Spider | [Unknown] | 2020-Jun 2021 | |
| | Rocket Kitten, Newscaster, NewsBeef | | 2011-2017 | |
| | Samurai Panda | | 2009 | |
| | Shadow Academy | [Unknown] | 2020 | |
| | Shadow Network | | 2010-2010 | |
| | Silence, Contract Crew | [Unknown] | 2016-Jan 2020 | |
| | Snowglobe, Animal Farm |  | 2011 | |
| Sofacy, APT 28, Fancy Bear, Sednit | | 2004-Apr 2022 | |
| | Stealth Falcon, FruityArmor |  | 2012-Sep 2019 | |
| | Stone Panda, APT 10, menuPass | | 2006-Feb 2022 | |
| | Sweed | [Unknown] | 2017-2019 | |
| | Syrian Electronic Army (SEA), Deadeye Jackal |  | 2011-Aug 2021 | |
| | TA2101, Maze Team | [Unknown] | 2019-Feb 2022 | |
| | TA530 | [Unknown] | 2016-Nov 2016 | |
| | TeamSpy Crew | | 2010-Feb 2017 | |
| | Tortilla | [Unknown] | 2021 | |
| | Transparent Tribe, APT 36 | | 2013-Jun 2021 | |
| | Traveling Spider | [Unknown] | 2019-Mar 2021 | |
| | Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens | | 2010-Oct 2018 | |
| Turla, Waterbug, Venomous Bear | | 1996-Apr 2022 | |
| | Void Balaur | [Unknown] | 2017 | |
| | Volatile Cedar |  | 2012-Early 2020 | |
| | Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
Other groups |
| | Achilles | [Unknown] | 2018-Oct 2018 | |
| Bamboo Spider, TA544 | [Unknown] | 2016-Apr 2022 | |
| | Boson Spider | [Unknown] | 2015-Nov 2017 | |
| | Cron | | 2015-Dec 2017 | |
| | Dark Basin | | 2013 | |
| | Deceptikons, DeathStalker | [Unknown] | 2012-May 2020 | |
| | Fxmsp |  | 2016-Jul 2020 | |
| | OurMine |  | 2016-Feb 2020 | |
| | Retefe Gang, Operation Emmental | | 2013 | |
| | Roaming Mantis | [Unknown] | 2017-2021 | |
| | Scully Spider, TA547 | [Unknown] | 2017-Sep 2019 | |
| | TA511 | [Unknown] | 2018-Oct 2020 | |
| | TA554 | [Unknown] | 2017 | |
