LOADING
Every vendor names the same adversary differently — APT28 is Fancy Bear is Forest Blizzard is G0007. One row per actor, one column per vendor. Search any name you know; click through to the dossier. Profile URLs also resolve aliases: /actors/fancy-bear lands on APT28. Pick a vendor above to read the whole table in their naming convention.
Other aliases: BlackShadow, DEV-0227, Pink Sandstorm
Other aliases: Citrine Sleet, CryptoCore, Gleaming Pisces, Hidden Cobra, Labyrinth Chollima, Lazarus Group, Nickel Academy, Sapphire Sleet, TraderTraitor
Other aliases: Brown Fox, Byzantine Candor, Comment Crew, Comment Group, GIF89a, PLA Unit 61398, TG-8223
Other aliases: ATK41, Cloud Hopper, CVNX, Granite Typhoon, HOGFISH, ITG01, menuPass, Red Apollo
Other aliases: Calc Team, DNSCalc, DynCalc, IXESHE
Other aliases: Ke3Chang, Lurid, Metushy, Mirage, Nylon Typhoon, Playful Dragon, Royal APT
Other aliases: Deputy Dog, Elderwood, Group 8, Hidden Lynx, SNEAKY PANDA, Tailgater Team
Other aliases: Threat Group-0416, Wekby, Wekby Group
Other aliases: Black Vine, C0d0so, Codoso, Group 13, KungFu Kittens, Pupa, Shell Crew, Sunshop Group
Other aliases: Group 36, MSUpdater Team, PLA Unit 61486
Other aliases: Crawling Taurus, TH3Bug, Twivy
Other aliases: TEMP.Zhenbao, Zhenbao
Other aliases: Barista, Suckfly
Other aliases: Bronze Hobbit, KeyBoy, Tropic Trooper
Other aliases: Ke3chang, Metushy, Mirage, Playful Dragon, Royal APT, Uncool
Other aliases: Hippo Team, JerseyMikes, Sunshop Group, Turbine Panda
Other aliases: BRONZE UNION, Budworm, Earth Smilodon, Group 35, Iron Tiger, LuckyMouse, Red Phoenix, Temp.Hex, Threat Group 3390, ZipToken
Other aliases: ATK5, Grizzly Steppe, Group 74, ITG05, Pawn Storm, Sednit Group, SNAKEMACKEREL, STRONTIUM, Swallowtail, TG-4127, Tsar Team
Other aliases: BlueBravo, Dark Halo, EuroAPT, Group 100, IRON HEMLOCK, ITG11, NOBELIUM, NobleBaron, Office Monkeys, SilverFish, StellarParticle, The Dukes, UNC2452, YTTRIUM
Other aliases: Boyusec, Buckeye, Group 6, Pirpi, UPS Team
Other aliases: Red keres, Zirconium
Other aliases: APT-C-00, Canvas Cyclone, Cobalt Kitty, Ocean Lotus, OceanBuffalo, OceanLotus, SeaLotus, SectorF01
Other aliases: ATK35, Cobalt Trinity, Elfin, HOLMIUM, Magnallium
Other aliases: ATK40, Chrysene, Crambus, Earth Winona, EUROPIUM, IRN2, ITG13, OilRig
Other aliases: Educated Manticore, ITG18, Magic Hound, Mint Sandstorm, NewsBeef, Newscaster, Yellow Garuda
Other aliases: C-Major, Earth Karkaddan, ProjectM, TMP.Lapis, Transparent Tribe
Other aliases: ATK4, Geumseong121, Group 123, InkySquid, Operation Daybreak, Reaper Group, RICOCHET CHOLLIMA, ScarCruft, Venus 121
Other aliases: BeagleBoyz, Bluenoroff, CageyChameleon, Sapphire Sleet
Other aliases: Chafer, ITG07, Radio Serpens, Remexi
Other aliases: Sykipot, Sykipot Group, Wisp Team
Other aliases: Feverdream, Gingham Typhoon, ISLANDDREAMS, ITG09, Leviathan, Mudcarp, Red Ladon, Temp.Jumper, Temp.Periscope
Other aliases: ATK17, Axiom, Blackfly, Brass Typhoon, Earth Baku, Grayfly, Group 72, LEAD, Suckfly, TG-2633, WICKED PANDA, WICKED SPIDER, Winnti, Winnti Group
Other aliases: APT35, Ballistic Bobcat, CALANQUE, Damselfly, ITG18, Newscaster, Phosphorus, UNC788, Yellow Garuda
Other aliases: Archipelago, Black Banshee, Emerald Sleet, ITG16, Kimsuky, KTA082, Nickel Kimball, Sparkling Pisces, Springtail, TA406
Other aliases: BE2 APT, BlackEnergy Group, ELECTRUM, FROZENBARENTS, GreyEnergy, Hades, Quedagh, Sandworm, Sandworm Team, Seashell Blizzard, Telebots, UAC-0113
Other aliases: Andariel, DarkSeoul, LABYRINTH CHOLLIMA, Nickel Hyatt, Onyx Sleet, Operation Troy, Stonefly
Other aliases: Mulberry Typhoon, Poisoned Flight, UNC2630
Other aliases: HUAPI, Manga Taurus, Palmerworm, RADIO PANDA, T-APT-03, Temp.Overboard
Other aliases: CHROMIUM, ControlX, Earth Lusca, RedHotel, TAG-22
Other aliases: Aria Sepehr Ayandehsazan, Cyber Flood, DEV-0166, Emennet Pasargad, Emennet Pasargad Ltd, Homeland Justice, MARNANBRIDGE, NEPTUNIUM, Yellow Candor
Other aliases: Lapsus, Lapsus$, LAPSUS$ Group, Strawberry Tempest
Other aliases: APT-C-35, Brainworm, Origami Elephant, SectorE02
Other aliases: Bronze University, FISHMONGER, Red Scylla, TAG-22
Other aliases: Bleeding Bear, Cadet Blizzard, FROZENVISTA, Lorec53, Nodaria, Saint Bear, UAC-0056
Other aliases: EQGRP, Lamberts, Longhorn, Tailored Access Operations, TAO, Tilded Team
Other aliases: DEV-0243, Dridex Gang, TA505 (overlap)
Other aliases: Jasper Sleet, Nickel Tapestry, Wagemole
Other aliases: None recorded
Other aliases: ATK103, Chimborazo, Dudear, Hive0065, SectorJ04
Other aliases: Grim Spider, Trickbot Group
Other aliases: Elephant Beetle
Other aliases: ITG08, MageCart Group 6, TAAL
Other aliases: Calcium, ELBRUS, ITG14
Other aliases: Syssphinx
Other aliases: RedJuliett, Storm-0919
Other aliases: ACTINIUM, Armageddon, BlueAlpha, DEV-0157, Shuckworm, Trident Ursa, UAC-0010, WINTERFLOUNDER
Other aliases: DEV-0322, Operation Exchange Marauder, Silk Typhoon
Other aliases: Crimson Sandstorm, Smoke Sandstorm, Tortoiseshell, Yellow Liderc
Other aliases: Appleworm, ATK3, Bureau 121, COVELLITE, Dark Seoul, Diamond Sleet, Guardians of Peace, HIDDEN COBRA, NewRomanic Cyber Army Team, NICKEL ACADEMY, Operation Troy, Subgroup: Andariel, Subgroup: Bluenoroff, Whois Hacking Team, WHOis Team
Other aliases: Billbug, DRAGONFISH, Esile, RAFFLES PANDA, Red Salamander, Thrip
Other aliases: HEXANE, SiameseKitten, Spirlin
Other aliases: Storm-1789
Other aliases: ATK51, Boggy Serpens, Earth Vetala, ITG17, MERCURY, Seedworm, STATIC KITTEN, Yellow Nix
Other aliases: BASIN, Camaro Dragon, Earth Preta, HoneyMyte, LuminousMoth, PKPLUG, Stately Taurus
Other aliases: Camerashy, Hellsing, Lotus Blossom, Override Panda
Other aliases: BANISHED KITTEN, Mint Sandstorm (overlap), Phosphorus
Other aliases: ATK11, Chinastrats, Dropping Elephant, Hangover, Monsoon, Operation Hangover, SectorE02, VICEROY TIGER
Other aliases: Br0k3r, Fox Kitten, PARISITE, RUBIDIUM
Other aliases: Maverick Panda (overlap), Samurai Panda, SODIUM, Sykipot, Wisp Team
Other aliases: 0ktapus, DEV-0971, LUCR-3, Muddled Libra, Octo Tempest, Oktapus, Roasted 0ktapus, Scatter Swine, Scattered Swine, Star Fraud, Starfraud, Storm-0875, Storm-0971, UNC3944
Other aliases: BlueCharlie, Calisto, Callisto, COLDRIVER, SEABORGIUM, TAG-53, UNC4057
Other aliases: Emotet, Mealybug
Other aliases: `proofpoint:TA577, Hive0118, Hive0118`
Other aliases: ACTINIUM, Armageddon, BlueAlpha, Primitive Bear, Shuckworm, UAC-0010, Winterflounder
Other aliases: Andariel, Appleworm, Bluenoroff, Dark Seoul, Group 77, Guardians of Peace, Hastati Group, Hidden Cobra, Lazarus Group, NICKEL ACADEMY, Operation Troy, Whois Team, ZINC
Other aliases: BERSERK BEAR, Dragonfly, Dragonfly 2.0, Dymalloy, Havex, Koala Team
Other aliases: APT37, Group 123, Reaper, ScarCruft
Other aliases: TRISIS, TRITON, Triton Actor, XENOTIME
Other aliases: Nian, REDBALDKNIGHT
Other aliases: CactusPete, Earth Akhlut, HeartBeat
Other aliases: ATK13, Group 88, Secret Blizzard, Snake, SUMMIT, Uroburos, Waterbug
Other aliases: CryptoCore, Dangerous Password, Leery Turtle
Other aliases: Ghostwriter, Moustached Bouncer, UAC-0107
Other aliases: BitPaymer, DoppelPaymer, Dridex Group, Evil Corp, Manatee Tempest
Other aliases: Cuba Ransomware Gang, Karakurt, Tropical Scorpius
Other aliases: Hidden Cobra, Lazarus Group, Operation Dream Job, TEMP.Hermit, Zinc
Other aliases: BlueCharlie, Calisto, Callisto Group, COLDRIVER, Dancing Salome, Gossamer Bear, SEABORGIUM
Other aliases: BASTA, Black Basta, Black Basta ransomware
Other aliases: Jade Sleet, PUKCHONG, Slow Pisces, TraderTraitor
Other aliases: Nickel Tapestry, Wagemole
Other aliases: Contagious Interview, DeceptiveDevelopment, Famous Chollima
Other aliases: Homeland Justice, Karma, Storm-0842
Other aliases: Dev-0391, INSIDIOUSTAUR, VOLTZITE
Other aliases: FIN12, Grim Spider, Trickbot Gang, UNC1878
| Canonical | MITRE 90 | Mandiant 119 | CrowdStrike 90 | Microsoft 76 | Secureworks 63 | Proofpoint 32 | Kaspersky 11 | ESET 9 | PwC 8 | Other aliases |
|---|---|---|---|---|---|---|---|---|---|---|
| IRAgriusAPT | G1030 | UNC3890 | · | AMERICIUM | IRON SANDSTORM | · | · | · | · | BlackShadow · DEV-0227 · Pink Sandstorm |
| ??AnonGhostHACK | · | · | · | · | · | · | · | · | · | GhostSec · OpIsrael affiliates |
| ??Anonymous SudanHACK | · | · | · | storm-1359 | · | · | · | · | · | SN_BLACKMETA |
| KPAppleJeusAPT | · | UNC4736 | LABYRINTH CHIMERA | DEV-0139 | IRON CURSOR | · | BlueNoroff | Lazarus | · | Citrine Sleet · CryptoCore · Gleaming Pisces · Hidden Cobra · Labyrinth Chollima · Lazarus Group · Nickel Academy · Sapphire Sleet · TraderTraitor |
| CNAPT1APT | G0006 | APT1 | COMMENT PANDA | · | IRON PANDA | · | · | · | · | Brown Fox · Byzantine Candor · Comment Crew · Comment Group · GIF89a · PLA Unit 61398 · TG-8223 |
| CNAPT10APT | G0045 | APT10 | STONE PANDA | POTASSIUM | BRONZE RIVERSIDE | TA429 | · | · | · | ATK41 · Cloud Hopper · CVNX · Granite Typhoon · HOGFISH · ITG01 · menuPass · Red Apollo |
| CNAPT12APT | G0005 | APT12 | NUMBERED PANDA | · | BRONZE GLOBE | · | · | · | · | Calc Team · DNSCalc · DynCalc · IXESHE |
| CNAPT14APT | · | APT14 | · | · | · | · | · | · | · | Anchor Panda · PLA Unit 61486 |
| CNAPT15APT | G0004 | APT15 | VIXEN PANDA | NICKEL | BRONZE PALACE | · | · | · | Red Vulture | Ke3Chang · Lurid · Metushy · Mirage · Nylon Typhoon · Playful Dragon · Royal APT |
| CNAPT16APT | G0023 | APT16 | · | · | · | · | · | · | · | SVCMONDR |
| CNAPT17APT | G0025 | APT17 | AURORA PANDA | · | IRON TWILIGHT | · | · | · | · | Deputy Dog · Elderwood · Group 8 · Hidden Lynx · SNEAKY PANDA · Tailgater Team |
| CNAPT18APT | G0026 | APT18 | DYNAMITE PANDA | SCANDIUM | TG-0416 | · | · | · | · | Threat Group-0416 · Wekby · Wekby Group |
| CNAPT19APT | G0073 | APT19 | DEEP PANDA | · | IRON LYRIC | · | · | · | · | Black Vine · C0d0so · Codoso · Group 13 · KungFu Kittens · Pupa · Shell Crew · Sunshop Group |
| CNAPT2APT | G0024 | APT2 | PUTTER PANDA | · | TG-6952 | · | · | · | · | Group 36 · MSUpdater Team · PLA Unit 61486 |
| CNAPT20APT | G0099 | APT20 | VIOLIN PANDA | · | · | · | · | · | · | Crawling Taurus · TH3Bug · Twivy |
| CNAPT21APT | G0091 | APT21 | HAMMER PANDA | · | · | · | · | · | · | TEMP.Zhenbao · Zhenbao |
| CNAPT22APT | G0014 | APT22 | BARISTA PANDA | · | · | · | · | · | · | Barista · Suckfly |
| CNAPT23APT | G0060 | APT23 | Pirate Panda | · | · | · | · | · | Red Salamander | Bronze Hobbit · KeyBoy · Tropic Trooper |
| CNAPT24APT | G0023 | APT24 | PITTY PANDA | · | · | · | · | · | · | PittyTiger |
| CNAPT25APT | G0062 | APT25 | Vixen Panda | Nylon Typhoon | BRONZE PALACE | · | · | · | · | Ke3chang · Metushy · Mirage · Playful Dragon · Royal APT · Uncool |
| CNAPT26APT | G0065 | APT26 | PANDA CHASER | · | · | · | · | · | · | Hippo Team · JerseyMikes · Sunshop Group · Turbine Panda |
| CNAPT27APT | G0027 | APT27 | EMISSARY PANDA | Silk Typhoon | TG-3390 | · | · | · | Red Sylvan | BRONZE UNION · Budworm · Earth Smilodon · Group 35 · Iron Tiger · LuckyMouse · Red Phoenix · Temp.Hex · Threat Group 3390 · ZipToken |
| RUAPT28APT | G0007 | APT28 | FANCY BEAR | Forest Blizzard | Iron Twilight | TA422 | Sofacy | Sednit | Blue Athena | ATK5 · Grizzly Steppe · Group 74 · ITG05 · Pawn Storm · Sednit Group · SNAKEMACKEREL · STRONTIUM · Swallowtail · TG-4127 · Tsar Team |
| RUAPT29APT | G0016 | APT29 | COZY BEAR | Midnight Blizzard | IRON RITUAL | TA421 | CozyDuke | Dukes | Blue Kitsune | BlueBravo · Dark Halo · EuroAPT · Group 100 · IRON HEMLOCK · ITG11 · NOBELIUM · NobleBaron · Office Monkeys · SilverFish · StellarParticle · The Dukes · UNC2452 · YTTRIUM |
| CNAPT3APT | G0022 | APT3 | GOTHIC PANDA | · | TG-0110 | · | · | · | · | Boyusec · Buckeye · Group 6 · Pirpi · UPS Team |
| CNAPT30APT | G0013 | APT30 | OVERRIDE PANDA | · | · | · | · | · | · | Naikon |
| CNAPT31APT | G0128 | APT31 | JUDGMENT PANDA | Violet Typhoon | BRONZE VINEWOOD | TA412 | · | · | · | Red keres · Zirconium |
| VNAPT32APT | G0050 | APT32 | OCEAN BUFFALO | BISMUTH | TIN WOODLAWN | TA461 | · | · | · | APT-C-00 · Canvas Cyclone · Cobalt Kitty · Ocean Lotus · OceanBuffalo · OceanLotus · SeaLotus · SectorF01 |
| IRAPT33APT | G0064 | APT33 | REFINED KITTEN | Peach Sandstorm | IRON TILDEN | TA451 | · | · | · | ATK35 · Cobalt Trinity · Elfin · HOLMIUM · Magnallium |
| IRAPT34APT | G0049 | APT34 | HELIX KITTEN | Hazel Sandstorm | COBALT GYPSY | TA452 | · | · | · | ATK40 · Chrysene · Crambus · Earth Winona · EUROPIUM · IRN2 · ITG13 · OilRig |
| IRAPT35APT | G0059 | APT35 | CHARMING KITTEN | Phosphorus | COBALT ILLUSION | TA453 | · | · | · | Educated Manticore · ITG18 · Magic Hound · Mint Sandstorm · NewsBeef · Newscaster · Yellow Garuda |
| PKAPT36APT | G0134 | APT36 | MYTHIC LEOPARD | Chinstrap Spider | COPPER FIELDSTONE | TA456 | · | · | · | C-Major · Earth Karkaddan · ProjectM · TMP.Lapis · Transparent Tribe |
| KPAPT37APT | G0067 | APT37 | VELVET CHOLLIMA | Ruby Sleet | IRON TILDEN | TA406 | · | Reaper | · | ATK4 · Geumseong121 · Group 123 · InkySquid · Operation Daybreak · Reaper Group · RICOCHET CHOLLIMA · ScarCruft · Venus 121 |
| KPAPT38APT | G0082 | APT38 | STARDUST CHOLLIMA | COPERNICIUM | NICKEL GLADSTONE | TA444 | · | · | · | BeagleBoyz · Bluenoroff · CageyChameleon · Sapphire Sleet |
| IRAPT39APT | G0087 | APT39 | REMIX KITTEN | PHOSPHORUS | COBALT HICKMAN | · | · | · | · | Chafer · ITG07 · Radio Serpens · Remexi |
| CNAPT4APT | G0074 | APT4 | MAVERICK PANDA | · | IRON LYRIC | · | · | · | · | Sykipot · Sykipot Group · Wisp Team |
| CNAPT40APT | · | APT40 | KRYPTONITE PANDA | GADOLINIUM | BRONZE MOHAWK | TA423 | · | · | · | Feverdream · Gingham Typhoon · ISLANDDREAMS · ITG09 · Leviathan · Mudcarp · Red Ladon · Temp.Jumper · Temp.Periscope |
| INAPT404APT | · | APT404 | · | · | · | · | · | · | · | · |
| CNAPT41APT | G0096 | APT41 | DOUBLE DRAGON | BARIUM | BRONZE ATLAS | · | · | · | · | ATK17 · Axiom · Blackfly · Brass Typhoon · Earth Baku · Grayfly · Group 72 · LEAD · Suckfly · TG-2633 · WICKED PANDA · WICKED SPIDER · Winnti · Winnti Group |
| IRAPT42APT | G1044 | APT42 | Charming Kitten | Mint Sandstorm | IRON RITUAL | TA453 | · | · | · | APT35 · Ballistic Bobcat · CALANQUE · Damselfly · ITG18 · Newscaster · Phosphorus · UNC788 · Yellow Garuda |
| KPAPT43APT | G0094 | APT43 | Velvet Chollima | Thallium | IRON TILDEN | TA427 | · | · | · | Archipelago · Black Banshee · Emerald Sleet · ITG16 · Kimsuky · KTA082 · Nickel Kimball · Sparkling Pisces · Springtail · TA406 |
| RUAPT44APT | G0034 | APT44 | VOODOO BEAR | IRIDIUM | IRON VIKING | · | · | · | · | BE2 APT · BlackEnergy Group · ELECTRUM · FROZENBARENTS · GreyEnergy · Hades · Quedagh · Sandworm · Sandworm Team · Seashell Blizzard · Telebots · UAC-0113 |
| KPAPT45APT | G0138 | APT45 | SILENT CHOLLIMA | PLUTONIUM | IRON TILDEN | TA404 | · | · | · | Andariel · DarkSeoul · LABYRINTH CHOLLIMA · Nickel Hyatt · Onyx Sleet · Operation Troy · Stonefly |
| ??APT49APT | · | APT49 | · | · | · | · | · | · | · | · |
| CNAPT5APT | G0021 | APT5 | KEYHOLE PANDA | MANGANESE | BRONZE FLEETWOOD | · | · | · | · | Mulberry Typhoon · Poisoned Flight · UNC2630 |
| CNAPT6APT | G0005 | APT6 | · | · | · | · | · | · | · | 1.php Group |
| CNAPT7APT | · | APT7 | · | · | · | · | · | · | · | · |
| ??APT73APT | · | APT73 | · | · | · | · | · | · | · | · |
| CNAPT8APT | · | APT8 | · | · | · | · | · | · | · | · |
| CNAPT9APT | · | APT9 | · | · | · | · | · | · | · | Group 27 · NIGHTSHADE PANDA · Red Pegasus |
| ??BahamutHACK | G0147 | · | · | · | · | · | · | · | · | EHDevel · Urpage · White Company · Windshift |
| CNBlackTechAPT | G0098 | APT41 | CIRCUIT PANDA | Circuit Typhoon | · | · | · | · | · | HUAPI · Manga Taurus · Palmerworm · RADIO PANDA · T-APT-03 · Temp.Overboard |
| CNCharcoal TyphoonAPT | G1019 | UNC5342 | AQUATIC PANDA | Charcoal Typhoon | · | · | · | · | · | CHROMIUM · ControlX · Earth Lusca · RedHotel · TAG-22 |
| INConfuciusAPT | G0142 | · | PANDA SPIDER | · | · | · | · | · | · | Confucius APT |
| IRCotton SandstormAPT | G1009 | · | HAYWIRE KITTEN | Cotton Sandstorm | · | · | · | · | · | Aria Sepehr Ayandehsazan · Cyber Flood · DEV-0166 · Emennet Pasargad · Emennet Pasargad Ltd · Homeland Justice · MARNANBRIDGE · NEPTUNIUM · Yellow Candor |
| ??DEV-0537CRIME | G1004 | · | SLIPPY SPIDER | DEV-0537 | · | · | · | · | · | Lapsus · Lapsus$ · LAPSUS$ Group · Strawberry Tempest |
| INDonot TeamAPT | G0090 | · | VICEROY TIGER | Quillin | · | TA592 | Donot APT | Donot | · | APT-C-35 · Brainworm · Origami Elephant · SectorE02 |
| CNDragonOKAPT | G0017 | · | · | · | · | · | · | · | · | Moafee |
| CNEarth LuscaAPT | G1006 | UNC2478 | AQUATIC PANDA | Charcoal Typhoon | · | TA423 | · | · | RedHotel | Bronze University · FISHMONGER · Red Scylla · TAG-22 |
| RUEmber BearAPT | G1003 | UNC2589 | Ember Bear | DEV-0586 | · | · | · | · | · | Bleeding Bear · Cadet Blizzard · FROZENVISTA · Lorec53 · Nodaria · Saint Bear · UAC-0056 |
| USEquation GroupAPT | G0020 | APT-C-40 | · | · | Platinum Colibri | · | Equation Group | · | · | EQGRP · Lamberts · Longhorn · Tailored Access Operations · TAO · Tilded Team |
| RUEvil CorpCRIME | G0119 | FIN11 | INDRIK SPIDER | Manatee Tempest | GOLD DRAKE | TA505 | · | · | · | DEV-0243 · Dridex Gang · TA505 (overlap) |
| KPFamous ChollimaAPT | · | UNC5267 | Famous Chollima | DEV-0530 | · | · | · | · | · | Jasper Sleet · Nickel Tapestry · Wagemole |
| RUFIN1CRIME | · | FIN1 | NIGHT SPIDER | · | · | · | · | · | · | Nash |
| ??FIN10CRIME | G0051 | FIN10 | ANTHROPOID SPIDER | · | · | · | · | · | · | · |
| RUFIN11CRIME | G0092 | FIN11 | GRACEFUL SPIDER | Lace Tempest | · | TA505 | · | · | · | ATK103 · Chimborazo · Dudear · Hive0065 · SectorJ04 |
| RUFIN12CRIME | G0102 | FIN12 | Wizard Spider | Ilex Vixen | GOLD BLACKBURN | · | · | · | · | Grim Spider · Trickbot Group |
| ??FIN13CRIME | G1016 | FIN13 | SARDONIC BEETLE | · | · | · | · | · | · | Elephant Beetle |
| ??FIN2CRIME | · | FIN2 | · | · | · | · | · | · | · | · |
| ??FIN3CRIME | · | FIN3 | CIRCUS SPIDER | · | · | · | · | · | · | · |
| ??FIN4CRIME | G0085 | FIN4 | WOLF SPIDER | · | · | · | · | · | · | · |
| RUFIN5CRIME | G0053 | FIN5 | GRACEFUL SPIDER | · | · | · | · | · | · | Sundown |
| RUFIN6CRIME | G0037 | FIN6 | Skeleton Spider | Camouflage Tempest | GOLD FRANKLIN | · | · | · | · | ITG08 · MageCart Group 6 · TAAL |
| RUFIN7CRIME | G0046 | FIN7 | CARBON SPIDER | Sangria Tempest | GOLD NIAGARA | · | Carbanak | · | · | Calcium · ELBRUS · ITG14 |
| ??FIN8CRIME | G0061 | FIN8 | GRACEFUL SPIDER | · | GOLD SNOWFLAKE | · | · | · | · | Syssphinx |
| CNFlax TyphoonAPT | G1008 | · | ETHEREAL PANDA | Flax Typhoon | · | · | · | · | · | RedJuliett · Storm-0919 |
| RUGamaredon GroupAPT | G0047 | UNC530 | PRIMITIVE BEAR | Aqua Blizzard | IRON TILDEN | · | · | Gamaredon | · | ACTINIUM · Armageddon · BlueAlpha · DEV-0157 · Shuckworm · Trident Ursa · UAC-0010 · WINTERFLOUNDER |
| CNGenesis PandaCRIME | · | UNC5174 | · | · | · | · | · | · | · | Earth Lamia · UNC5454 |
| CNHAFNIUMAPT | G0125 | · | JUDGMENT PANDA | HAFNIUM | IRON TYPHOON | · | · | · | · | DEV-0322 · Operation Exchange Marauder · Silk Typhoon |
| IRImperial KittenAPT | G1023 | UNC1549 | Imperial Kitten | Marigold Sandstorm | · | TA456 | · | · | · | Crimson Sandstorm · Smoke Sandstorm · Tortoiseshell · Yellow Liderc |
| KPLazarus GroupAPT | G0032 | APT38 | Labyrinth Chollima | Zinc | IRON HIGHLAND | TA404 | Lazarus Group | Lazarus | · | Appleworm · ATK3 · Bureau 121 · COVELLITE · Dark Seoul · Diamond Sleet · Guardians of Peace · HIDDEN COBRA · NewRomanic Cyber Army Team · NICKEL ACADEMY · Operation Troy · Subgroup: Andariel · Subgroup: Bluenoroff · Whois Hacking Team · WHOis Team |
| CNLotus BlossomAPT | G0030 | APT51 | Spring Dragon | Raspberry Typhoon | BRONZE ELGIN | · | · | · | · | Billbug · DRAGONFISH · Esile · RAFFLES PANDA · Red Salamander · Thrip |
| CNLuoYuAPT | · | · | · | · | · | · | · | · | · | Fishing Elephant · Operation TunnelSnake |
| IRLyceumAPT | G0136 | · | LYCEUM TEMPEST | Storm-0133 | COBALT LYCEUM | · | · | · | · | HEXANE · SiameseKitten · Spirlin |
| KPMoonstone SleetAPT | G1036 | UNC4899 | · | Moonstone Sleet | · | · | · | · | · | Storm-1789 |
| IRMuddyWaterAPT | G0069 | Temp.Zagros | HELIX KITTEN | Mango Sandstorm | COBALT ULSTER | TA450 | · | · | · | ATK51 · Boggy Serpens · Earth Vetala · ITG17 · MERCURY · Seedworm · STATIC KITTEN · Yellow Nix |
| CNMustang PandaAPT | G0129 | Temp.Hex | Mustang Panda | Twill Typhoon | BRONZE PRESIDENT | TA416 | · | · | RedDelta | BASIN · Camaro Dragon · Earth Preta · HoneyMyte · LuminousMoth · PKPLUG · Stately Taurus |
| CNNaikonAPT | G0019 | APT30 | LOTUS PANDA | Circle Typhoon | BRONZE GEIST | · | · | · | · | Camerashy · Hellsing · Lotus Blossom · Override Panda |
| IRNemesis KittenAPT | · | UNC2448 | Nemesis Kitten | DEV-0270 | COBALT MIRAGE | · | · | · | · | BANISHED KITTEN · Mint Sandstorm (overlap) · Phosphorus |
| INPatchworkAPT | G0040 | APT-C-09 | QUILTED TIGER | Vibrant Opal | IRON PANDA | · | · | · | · | ATK11 · Chinastrats · Dropping Elephant · Hangover · Monsoon · Operation Hangover · SectorE02 · VICEROY TIGER |
| IRPioneer KittenAPT | · | UNC757 | Pioneer Kitten | Lemon Sandstorm | · | · | · | · | · | Br0k3r · Fox Kitten · PARISITE · RUBIDIUM |
| ILPredatory SparrowHACK | · | · | · | · | · | · | · | · | · | Gonjeshke Darande |
| CNSalmon TyphoonAPT | G0143 | APT4 | MAVERICK PANDA | Salmon Typhoon | · | · | · | · | · | Maverick Panda (overlap) · Samurai Panda · SODIUM · Sykipot · Wisp Team |
| IRScarred ManticoreAPT | · | · | · | Storm-0861 | · | · | · | · | · | OilCheck |
| USScattered SpiderCRIME | G1015 | · | · | · | · | · | · | · | · | 0ktapus · DEV-0971 · LUCR-3 · Muddled Libra · Octo Tempest · Oktapus · Roasted 0ktapus · Scatter Swine · Scattered Swine · Star Fraud · Starfraud · Storm-0875 · Storm-0971 · UNC3944 |
| PKSideCopyAPT | · | · | · | · | · | · | · | · | · | APT-C-56 · Transparent Tribe Sub-group |
| RUStar BlizzardAPT | G1033 | · | GOSSAMER BEAR | Star Blizzard | IRON FRONTIER | TA446 | · | · | Blue Callisto | BlueCharlie · Calisto · Callisto · COLDRIVER · SEABORGIUM · TAG-53 · UNC4057 |
| CNTA413APT | G1011 | · | · | Storm-1419 | · | TA413 | · | · | · | LuckyCat |
| ??TA542CRIME | G0126 | · | MUMMY SPIDER | DEV-0184 | GOLD CRESTWOOD | TA542 | · | · | · | Emotet · Mealybug |
| ??TA551CRIME | G0127 | UNC2420 | · | · | · | TA551 | · | · | · | Gold Cabin · Shathak |
| ??TA570CRIME | · | · | · | · | · | TA570 | · | · | · | Charming Serpens |
| ??TA577CRIME | · | UNC1543 | · | · | · | TA577 | · | · | · | `proofpoint:TA577 · Hive0118 · Hive0118` |
| RUTEMP.ArmageddonAPT | · | TEMP.Armageddon | · | Aqua Blizzard | IRON TILDEN | TA582 | · | Gamaredon | · | ACTINIUM · Armageddon · BlueAlpha · Primitive Bear · Shuckworm · UAC-0010 · Winterflounder |
| CNTEMP.BottleAPT | · | TEMP.Bottle | · | · | · | · | · | · | · | · |
| KPTEMP.HermitAPT | · | TEMP.Hermit | Labyrinth Chollima | Diamond Sleet | · | · | Lazarus | · | · | Andariel · Appleworm · Bluenoroff · Dark Seoul · Group 77 · Guardians of Peace · Hastati Group · Hidden Cobra · Lazarus Group · NICKEL ACADEMY · Operation Troy · Whois Team · ZINC |
| RUTEMP.IsotopeAPT | G0035 | TEMP.Isotope | ENERGETIC BEAR | Ghost Blizzard | IRON LIBERTY | · | Crouching Yeti | · | · | BERSERK BEAR · Dragonfly · Dragonfly 2.0 · Dymalloy · Havex · Koala Team |
| ??TEMP.ReaperAPT | · | TEMP.Reaper | RICOCHET COLLIE | Ruby Sleet | · | · | · | · | · | APT37 · Group 123 · Reaper · ScarCruft |
| RUTEMP.VelesAPT | G0088 | TEMP.Veles | HEXANE | · | IRON GATE | · | · | · | · | TRISIS · TRITON · Triton Actor · XENOTIME |
| CNTickAPT | · | · | STALKER PANDA | Perplexed Bunny | BRONZE BUTLER | · | · | · | · | Nian · REDBALDKNIGHT |
| CNToddyCatAPT | G1022 | · | · | · | · | · | · | · | · | Websiic |
| CNTonto TeamAPT | G0131 | · | KARMA PANDA | Purple Typhoon | BRONZE HUNTLEY | · | · | · | · | CactusPete · Earth Akhlut · HeartBeat |
| CNTropic TrooperAPT | G0081 | · | · | · | · | · | · | · | · | Earth Centaur · KeyBoy · Pirate Panda |
| RUTurlaAPT | G0010 | APT29 | VENOMOUS BEAR | KRYPTON | IRON HUNTER | · | Turla | · | · | ATK13 · Group 88 · Secret Blizzard · Snake · SUMMIT · Uroburos · Waterbug |
| ??UNC1066APT | · | UNC1066 | · | · | · | · | · | · | · | · |
| KPUNC1069APT | · | UNC1069 | · | Moonstone Sleet | · | · | · | · | · | CryptoCore · Dangerous Password · Leery Turtle |
| BYUNC1151APT | G0146 | UNC1151 | · | Storm-0257 | IRON VIKING | TA445 | · | · | · | Ghostwriter · Moustached Bouncer · UAC-0107 |
| TRUNC1326APT | · | UNC1326 | · | · | · | · | · | · | · | · |
| ??UNC1543CRIME | · | UNC1543 | · | · | · | · | · | · | · | · |
| ??UNC1720APT | · | UNC1720 | · | · | · | · | · | · | · | · |
| IRUNC1860APT | · | UNC1860 | · | · | · | · | · | · | · | · |
| CNUNC215APT | G0072 | UNC215 | · | Mercury | · | · | · | · | · | · |
| RUUNC2165CRIME | · | UNC2165 | INDRIK SPIDER | · | GOLD DRAKE | · | · | · | · | BitPaymer · DoppelPaymer · Dridex Group · Evil Corp · Manatee Tempest |
| RUUNC2198CRIME | · | UNC2198 | · | · | · | · | · | · | · | · |
| ??UNC2447CRIME | · | UNC2447 | · | · | · | · | · | · | · | · |
| RUUNC2596CRIME | · | UNC2596 | · | · | GOLD IONIC | · | · | · | · | Cuba Ransomware Gang · Karakurt · Tropical Scorpius |
| CNUNC28APT | · | UNC28 | · | · | · | · | · | · | · | · |
| KPUNC2970APT | · | UNC2970 | LABYRINTH CHOLLIMA | Diamond Sleet | IRON CURSOR | · | Bluenoroff | Lazarus | · | Hidden Cobra · Lazarus Group · Operation Dream Job · TEMP.Hermit · Zinc |
| CNUNC3569APT | · | UNC3569 | · | · | · | · | · | · | · | · |
| ??UNC3753CRIME | · | UNC3753 | · | · | · | · | · | · | · | · |
| CNUNC3886APT | G1046 | UNC3886 | · | · | · | · | · | · | · | · |
| RUUNC4057APT | · | UNC4057 | BLUE CALLISTO | Star Blizzard | IRON FRONTIER | TA446 | · | · | · | BlueCharlie · Calisto · Callisto Group · COLDRIVER · Dancing Salome · Gossamer Bear · SEABORGIUM |
| ??UNC4393CRIME | · | UNC4393 | SPRITE SPIDER | Storm-1811 | · | · | · | · | · | BASTA · Black Basta · Black Basta ransomware |
| LBUNC4453APT | · | UNC4453 | · | · | · | · | · | · | · | · |
| KPUNC4899APT | G1041 | UNC4899 | LABYRINTH CHOLLIMA | · | · | · | · | · | · | Jade Sleet · PUKCHONG · Slow Pisces · TraderTraitor |
| KPUNC5267APT | · | UNC5267 | FAMOUS CHOLLIMA | Storm-0287 | · | · | · | · | · | Nickel Tapestry · Wagemole |
| KPUNC5342APT | · | UNC5342 | · | · | · | · | · | · | · | Contagious Interview · DeceptiveDevelopment · Famous Chollima |
| KPUNC577APT | · | UNC577 | · | · | · | · | · | · | · | · |
| CNUNC5807APT | · | UNC5807 | · | · | · | · | · | · | · | · |
| CNUNC6384APT | · | UNC6384 | · | · | · | · | · | · | · | · |
| ??UNC6588APT | · | UNC6588 | · | · | · | · | · | · | · | · |
| ??UNC961CRIME | · | UNC961 | · | · | · | · | · | · | · | · |
| ??Vice SocietyCRIME | G1042 | · | · | DEV-0832 | · | · | · | · | · | Storm-0832 · Vanilla Tempest |
| IRVoid ManticoreAPT | · | · | · | Plaid Rain | · | · | · | · | · | Homeland Justice · Karma · Storm-0842 |
| CNVolt TyphoonAPT | G1017 | UNC3236 | VANGUARD PANDA | Volt Typhoon | BRONZE SILHOUETTE | · | · | · | · | Dev-0391 · INSIDIOUSTAUR · VOLTZITE |
| RUWizard SpiderCRIME | · | TEMP.MixMaster | Wizard Spider | Periwinkle Tempest | GOLD BLACKBURN | · | · | · | · | FIN12 · Grim Spider · Trickbot Gang · UNC1878 |