Changed | Name | Country | Observed |
APT groups |
| Aggah | [Unknown] | 2018-May 2020 | |
| APT 29, Cozy Bear, The Dukes |  | 2008-2020 |  |
| APT 30, Override Panda |  | 2005 | |
| APT 32, OceanLotus, SeaLotus |  | 2013-Dec 2020  |  |
| APT 41 |  | 2012-Aug 2020 |  |
| Calypso |  | 2016 | |
| Carbanak, Anunak |  | 2013-Aug 2018 |  |
| Cold River | [Unknown] | 2019 | |
| Comment Crew, APT 1 |  | 2006-May 2018 |  |
| CostaRicto | [Unknown] | 2017 | |
| Cutting Kitten, TG-2889 |  | 2012-Mar 2016 |  |
| Dark Caracal |  | 2007-2020 | |
| DarkHotel |  | 2007-May 2020 | |
| Desert Falcons | [Gaza] | 2011-Dec 2020  |  |
| Donot Team | [Unknown] | 2018-May 2020 | |
| Emissary Panda, APT 27, LuckyMouse, Bronze Union |  | 2010-Jun 2020 | |
| Equation Group |  | 2001-Aug 2016 |  |
| FIN11 | [Unknown] | 2016-Oct 2020 | |
| GhostNet, Snooping Dragon |  | 2009-2010 |  |
| Goblin Panda, Cycldek, Conimes |  | 2013-2018 | |
| Hidden Lynx, Aurora Panda |  | 2009-2014 |  |
| Icefog, Dagger Panda |  | 2011-2018/2019 | |
| Inception Framework, Cloud Atlas |  | 2012-2019 | |
| Ke3chang, Vixen Panda, APT 15, GREF, Playful Dragon |  | 2010-May 2020 | |
| Lazarus Group, Hidden Cobra, Labyrinth Chollima |  | 2007-Dec 2020  |  |
| ↳ Subgroup: BeagleBoyz |  | 2014-Feb 2016 | |
| Lucky Cat |  | 2011 | |
| Molerats, Extreme Jackal, Gaza Cybergang | [Gaza] | 2012-Oct 2020 | |
| MuddyWater, Seedworm, TEMP.Zagros, Static Kitten |  | 2017-Dec 2020  |  |
| Mustang Panda, Bronze President |  | 2014-Mar 2020 | |
| Naikon, Lotus Panda |  | 2012-2017 | |
| NetTraveler, APT 21, Hammer Panda |  | 2004-Dec 2015 | |
| Nitro, Covert Grove |  | 2011-Jul 2014 | |
| Operation Black Atlas | [Unknown] | 2015 | |
| Operation Ghoul | [Unknown] | 2016 | |
| Operation HangOver, Monsoon, Viceroy Tiger |  | 2010-Jan 2020 | |
| Operation Parliament | [Unknown] | 2017 | |
| Operation Shady RAT |  | 2006 | |
| Orangeworm | [Unknown] | 2015-Jan 2020 | |
| Platinum |  | 2009-Nov 2019 | |
| Poseidon Group |  | 2005-Feb 2016 |  |
| PowerPool | [Unknown] | 2018 | |
| Promethium, StrongPity |  | 2012-Feb 2020 | |
| Reaper, APT 37, Ricochet Chollima, ScarCruft |  | 2012-Dec 2020  |  |
| RedAlpha |  | 2015-2017 | |
| RedDelta |  | 2020-Sep 2020 | |
| Rocket Kitten, Newscaster, NewsBeef |  | 2011-2017 | |
| Safe |  | 2013 | |
| Shadow Network |  | 2010-2010 |  |
| Silence, Contract Crew | [Unknown] | 2016-Jan 2020 | |
| Sofacy, APT 28, Fancy Bear, Sednit |  | 2004-Nov 2020 |  |
| Stone Panda, APT 10, menuPass |  | 2006-Jul 2020 |  |
| Suckfly |  | 2014-Late 2015 | |
| Sweed | [Unknown] | 2017-2019 | |
| TeamSpy Crew |  | 2010-Feb 2017 | |
| Tonto Team, HartBeat, Karma Panda |  | 2009-Dec 2019 | |
| Transparent Tribe, APT 36 |  | 2013-Apr 2020 | |
| Tropic Trooper, Pirate Panda, APT 23, KeyBoy |  | 2011-Apr 2020 | |
| Turbine Panda, APT 26, Shell Crew, WebMasters, KungFu Kittens |  | 2010-Oct 2018 |  |
| Turla, Waterbug, Venomous Bear |  | 1996-Jun 2020 | |
| Wassonite |  | 2018-Oct 2019 | |
| Whitefly, Mofang | [Unknown] | 2012-Jul 2018 | |
| Winnti Group, Blackfly, Wicked Panda |  | 2010-Feb 2020 | |
| [Unnamed group Iran] |  | 2019-May 2019 |  |
Other groups |
| Dark Basin |  | 2013 | |
| Deceptikons, DeathStalker | [Unknown] | 2012-May 2020 | |
| Fxmsp |  | 2016-Jul 2020 |  |
| Roaming Mantis | [Unknown] | 2017-Jun 2020 | |
| Yingmob |  | 2016-Jan 2017 | |