Changed | Name | Country | Observed |
APT groups |
| Aggah | [Unknown] | 2018-May 2020 | |
| Allanite | [Unknown] | 2017 | |
| Anchor Panda, APT 14 |  | 2012 | |
| APT 3, Gothic Panda, Buckeye |  | 2007-Nov 2017 |  |
| APT 4, Maverick Panda, Wisp Team |  | 2007-Oct 2018 | |
| APT 5, Keyhole Panda |  | 2007-Aug 2019 | |
| APT 6 |  | 2011 | |
| APT 12, Numbered Panda |  | 2009-Nov 2016 | |
| APT 16, SVCMONDR |  | 2015 | |
| APT 17, Deputy Dog, Elderwood, Sneaky Panda |  | 2009-Sep 2017 | |
| APT 18, Dynamite Panda, Wekby |  | 2009-May 2016 | |
| APT 19, Deep Panda, C0d0so0 |  | 2013-May 2019 |  |
| APT 20, Violin Panda |  | 2014-2017 | |
| APT 29, Cozy Bear, The Dukes |  | 2008-2020 |  |
| APT 30, Override Panda |  | 2005 | |
| APT 31, Judgment Panda, Zirconium |  | 2016 | |
| APT 32, OceanLotus, SeaLotus |  | 2013-Dec 2020  |  |
| APT 33, Elfin, Magnallium |  | 2013-Nov 2019 | |
| APT 41 |  | 2012-Aug 2020 |  |
| AVIVORE |  | 2015 | |
| Axiom, Group 72 |  | 2008-2008/2014 | |
| Bahamut | [Middle East] | 2016-Jul 2018 | |
| Barium |  | 2016-Nov 2017 |  |
| The Big Bang | [Unknown] | 2017 | |
| Bitter | [South Asia] | 2013-May 2019 | |
| Blackgear |  | 2018-Jul 2018 | |
| BlackOasis | [Middle East] | 2015-Oct 2017 | |
| BlackTech, Circuit Panda, Radio Panda |  | 2010-2020 | |
| Blind Eagle | [Latin America] | 2018 | |
| Blue Termite, Cloudy Omega |  | 2013 | |
| Bookworm |  | 2015 | |
| Bronze Butler, Tick, RedBaldNight, Stalker Panda |  | 2010-Jun 2019 | |
| Cadelle |  | 2011 | |
| Callisto Group | [Unknown] | 2013 | |
| Calypso |  | 2016 | |
| CardinalLizard |  | 2014 | |
| Careto, The Mask | [Unknown] | 2007-Feb 2014 |  |
| Chafer, APT 39 |  | 2014-Sep 2020 |  |
| Chimera |  | 2018-Oct 2019 | |
| CIA |  | 1947-Sep 2018 |  |
| ↳ Subgroup: Longhorn, The Lamberts |  | 2009 | |
| ↳ Subgroup: [Unnamed group USA] |  | 2019-Mar 2020 | |
| Clever Kitten |  | 2013 | |
| Cold River | [Unknown] | 2019 | |
| Comment Crew, APT 1 |  | 2006-May 2018 |  |
| Confucius |  | 2013-May 2018 | |
| CopyKittens, Slayer Kitten |  | 2013-Jan 2017 | |
| Covellite |  | 2017 | |
| Cutting Kitten, TG-2889 |  | 2012-Mar 2016 |  |
| Cyber Berkut |  | 2014-May 2015 | |
| Dark Caracal |  | 2007-2020 | |
| DarkHotel |  | 2007-May 2020 | |
| DarkHydrus, LazyMeerkat |  | 2016-Jan 2019 | |
| DarkUniverse | [Unknown] | 2017 | |
| Desert Falcons | [Gaza] | 2011-Dec 2020  |  |
| DNSpionage |  | 2019-Apr 2019 | |
| Domestic Kitten |  | 2016 | |
| Donot Team | [Unknown] | 2018-May 2020 | |
| DragonOK |  | 2015-Jan 2017 | |
| DustSquad, Golden Falcon |  | 2014 | |
| Dust Storm |  | 2010 | |
| Earth Wendigo |  | 2019 | |
| El Machete | [Unknown] | 2010-Jun 2020 | |
| Emissary Panda, APT 27, LuckyMouse, Bronze Union |  | 2010-Jun 2020 | |
| Equation Group |  | 2001-Aug 2016 |  |
| Evil Eye |  | 2019-Jan 2020 | |
| Evilnum | [Unknown] | 2018-Aug 2020 | |
| Fishing Elephant | [Unknown] | 2019 | |
| Flying Kitten, Ajax Security Team |  | 2010-2013 | |
| FunnyDream |  | 2018 | |
| Gallium |  | 2018 | |
| Gallmaker | [Unknown] | 2017 | |
| Gamaredon Group |  | 2013-Apr 2020 | |
| Gangnam Industrial Style | [Unknown] | 2019 | |
| GCHQ |  | 1919-2010 | |
| GhostNet, Snooping Dragon |  | 2009-2010 |  |
| Goblin Panda, Cycldek, Conimes |  | 2013-2018 | |
| Gorgon Group |  | 2017-Jul 2020 | |
| Group5 |  | 2015 | |
| Hexane | [Unknown] | 2017 | |
| Hidden Lynx, Aurora Panda |  | 2009-2014 |  |
| Honeybee | [Unknown] | 2017 | |
| Hurricane Panda |  | 2013-Mar 2014 | |
| IAmTheKing |  | 2018 | |
| Icefog, Dagger Panda |  | 2011-2018/2019 | |
| Inception Framework, Cloud Atlas |  | 2012-2019 | |
| Infy, Prince of Persia |  | 2013-Feb 2017 |  |
| InvisiMole |  | 2013-Late 2019 | |
| Iridium |  | 2018-Dec 2018 | |
| IronHusky |  | 2017 | |
| ITG18 |  | 2013-May 2020 | |
| Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon |  | 2010-May 2020 | |
| Kimsuky, Velvet Chollima |  | 2012-Mar 2020 |  |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-Dec 2020  |  |
| ↳ Subgroup: Andariel, Silent Chollima |  | 2014-Jun 2018 | |
| Lead |  | 2016 | |
| Leafminer, Raspite |  | 2017 | |
| leetMX |  | 2016 | |
| Leviathan, APT 40, TEMP.Periscope |  | 2013-Jan 2020 | |
| Libyan Scorpions |  | 2015 | |
| LookBack, TA410 | [Unknown] | 2019-Aug 2019 | |
| Lotus Blossom, Spring Dragon, Thrip |  | 2012-Jun 2018 | |
| Lucky Cat |  | 2011 | |
| Mabna Institute, Cobalt Dickens, Silent Librarian |  | 2013-Sep 2020 |  |
| Madi |  | 2011-Jul 2012 | |
| Magic Hound, APT 35, Cobalt Gypsy, Charming Kitten |  | 2013-Dec 2020  |  |
| Mikroceen |  | 2017 | |
| Moafee |  | 2014 | |
| Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Oct 2020 | |
| MuddyWater, Seedworm, TEMP.Zagros, Static Kitten |  | 2017-Dec 2020  |  |
| Mustang Panda, Bronze President |  | 2014-Mar 2020 | |
| Naikon, Lotus Panda |  | 2012-2017 | |
| Nazar |  | 2008 | |
| Neodymium |  | 2016 | |
| NetTraveler, APT 21, Hammer Panda |  | 2004-Dec 2015 | |
| Night Dragon |  | 2009 | |
| Nightshade Panda, APT 9, Group 27 |  | 2013-Sep 2016 | |
| NineBlog |  | 2013 | |
| Nitro, Covert Grove |  | 2011-Jul 2014 | |
| OilRig, APT 34, Helix Kitten, Chrysene |  | 2014-Apr 2020 |  |
| ↳ Subgroup: Greenbug, Volatile Kitten |  | 2016-Oct 2017 | |
| OnionDog |  | 2013 | |
| Operation BugDrop |  | 2016 | |
| Operation Domino, Operation Kremlin |  | 2019-Dec 2020  | |
| Operation DRBControl |  | 2019 | |
| Operation Earth Kitsune |  | 2019 | |
| Operation Epic Manchego | [Unknown] | 2020 | |
| Operation Ghoul | [Unknown] | 2016 | |
| Operation Groundbait |  | 2008 | |
| Operation HangOver, Monsoon, Viceroy Tiger |  | 2010-Jan 2020 | |
| Operation Manul |  | 2015 | |
| Operation Olympic Games |  | 2007 | |
| Operation Parliament | [Unknown] | 2017 | |
| Operation Poisoned News, TwoSail Junk |  | 2020 | |
| Operation Poison Needles |  | 2018 | |
| Operation Potao Express | [Unknown] | 2015 | |
| Operation Red Signature |  | 2018 | |
| Operation Shady RAT |  | 2006 | |
| Operation SignSight | [Unknown] | 2020 | |
| Operation Spalax | [Unknown] | 2020 | |
| Operation Titan Rain |  | 2003 | |
| Operation ViceLeaker | [Unknown] | 2018 | |
| Operation WizardOpium |  | 2019 | |
| Orangeworm | [Unknown] | 2015-Jan 2020 | |
| Packrat | [Latin America] | 2008 | |
| Parisite, Fox Kitten, Pioneer Kitten |  | 2017-Sep 2020 | |
| PassCV |  | 2016 | |
| Patchwork, Dropping Elephant |  | 2013-Mar 2018 | |
| PittyTiger, Pitty Panda |  | 2011-2014 | |
| PKPLUG |  | 2016 | |
| Platinum |  | 2009-Nov 2019 | |
| Poison Carp, Evil Eye |  | 2018-Early 2020 | |
| Poseidon Group |  | 2005-Feb 2016 |  |
| PowerPool | [Unknown] | 2018 | |
| Promethium, StrongPity |  | 2012-Feb 2020 | |
| Pusikurac | [Unknown] | 2019 | |
| Putter Panda, APT 2 |  | 2007 | |
| Rampant Kitten |  | 2014 | |
| Rancor |  | 2017 | |
| RATicate | [Unknown] | 2019 | |
| Reaper, APT 37, Ricochet Chollima, ScarCruft |  | 2012-Dec 2020  |  |
| RedAlpha |  | 2015-2017 | |
| RedCurl | [Unknown] | 2018 | |
| RedDelta |  | 2020-Sep 2020 | |
| RevengeHotels | [Unknown] | 2015 | |
| Roaming Tiger |  | 2014-Aug 2015 | |
| Rocket Kitten, Newscaster, NewsBeef |  | 2011-2017 | |
| Safe |  | 2013 | |
| Samurai Panda |  | 2009 | |
| SandCat |  | 2018 | |
| Scarlet Mimic |  | 2015 | |
| Sea Turtle |  | 2017-Apr 2019 | |
| Shadow Academy | [Unknown] | 2020 | |
| Shadow Network |  | 2010-2010 |  |
| ShaggyPanther |  | 2018 | |
| SideWinder, Rattlesnake |  | 2012-Mar 2019 | |
| Siesta |  | 2014 | |
| Sima |  | 2016 | |
| Slingshot | [Unknown] | 2012 | |
| Snake Wine |  | 2016 | |
| Snowglobe, Animal Farm |  | 2011 | |
| Sofacy, APT 28, Fancy Bear, Sednit |  | 2004-Nov 2020 |  |
| Sowbug | [Unknown] | 2015 | |
| Sphinx | [Unknown] | 2014 | |
| Stealth Falcon, FruityArmor |  | 2012-Sep 2019 | |
| Stone Panda, APT 10, menuPass |  | 2006-Jul 2020 |  |
| Strider, ProjectSauron |  | 2011 | |
| Suckfly |  | 2014-Late 2015 | |
| Sweed | [Unknown] | 2017-2019 | |
| Syrian Electronic Army (SEA), Deadeye Jackal |  | 2011-May 2018 |  |
| ↳ Subgroup: Goldmouse, APT-C-27 |  | 2014 | |
| ↳ Subgroup: Pat Bear, APT-C-37 |  | 2015 | |
| TA2552 | [Unknown] | 2019 | |
| TA413 |  | 2019 | |
| TA428 |  | 2019-Jun 2020 | |
| TA459 |  | 2017 | |
| Taidoor |  | 2008 | |
| TaskMasters |  | 2010 | |
| TeamSpy Crew |  | 2010-Feb 2017 | |
| Temper Panda, admin@338 |  | 2014 | |
| Tempting Cedar Spyware |  | 2015 | |
| Tonto Team, HartBeat, Karma Panda |  | 2009-Dec 2019 | |
| Tortoiseshell, Imperial Kitten |  | 2018-Sep 2019 | |
| Transparent Tribe, APT 36 |  | 2013-Apr 2020 | |
| Tropic Trooper, Pirate Panda, APT 23, KeyBoy |  | 2011-Apr 2020 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens |  | 2010-Oct 2018 |  |
| Turla, Waterbug, Venomous Bear |  | 1996-Jun 2020 | |
| UNC2452, Dark Halo, SolarStorm |  | 2019 | |
| Urpage | [Middle East] | 2018 | |
| Vendetta, TA2719 |  | 2020 | |
| Vicious Panda |  | 2015-Mar 2020 | |
| Volatile Cedar |  | 2012-Jun 2015 | |
| Wassonite |  | 2018-Oct 2019 | |
| The White Company | [Unknown] | 2017-Nov 2017 | |
| Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| Wild Neutron, Butterfly, Sphinx Moth | [Unknown] | 2013-Feb 2013 | |
| WildPressure | [Unknown] | 2019 | |
| WindShift | [Unknown] | 2018 | |
| Winnti Group, Blackfly, Wicked Panda |  | 2010-Feb 2020 | |
| WIRTE Group | [Middle East] | 2018 | |
| XDSpy | [Unknown] | 2011 | |
| xHunt | [Unknown] | 2018-Aug 2019 | |
| ZooPark | [Unknown] | 2015 | |
| [Unnamed group Iran] |  | 2019-May 2019 |  |
Other groups |
| Bismuth |  | 2012 | |
| Dark Basin |  | 2013 | |
| Deceptikons, DeathStalker | [Unknown] | 2012-May 2020 | |