The following table provides a mapping of the actor groups tracked by the MISP Galaxy Project, augmented with the families covered in Malpedia.
| Comment Panda, PLA Unit 61398, APT 1, APT1, Advanced Persistent Threat 1, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, Shanghai Group | Comment Crew | 35 | 35 | |||
| Operation DarkSeoul, Dark Seoul, Hidden Cobra, Hastati Group, Andariel, Unit 121, Bureau 121, NewRomanic Cyber Army Team, Bluenoroff, Subgroup: Bluenoroff, Group 77, Labyrinth Chollima, Operation Troy, Operation GhostSecret, Operation AppleJeus, APT38, APT 38, Stardust Chollima, Whois Hacking Team, Zinc, Appleworm, Nickel Academy, APT-C-26 | Lazarus Group | 33 | 79 | |||
| APT 28, APT28, Pawn Storm, PawnStorm, Fancy Bear, Sednit, SNAKEMACKEREL, TsarTeam, Tsar Team, TG-4127, Group-4127, STRONTIUM, TAG_0700, Swallowtail, IRON TWILIGHT, Group 74, SIG40, Grizzly Steppe | Sofacy | 21 | 184 | |||
| Turla, Snake, Venomous Bear, Group 88, Waterbug, WRAITH, Turla Team, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, Iron Hunter | Turla Group | 20 | 79 | |||
| Carbanak, Carbon Spider, FIN7 | Anunak | 19 | 44 | |||
| PLA Unit 78020, APT 30, APT30, Override Panda, Camerashy, APT.Naikon, Lotus Panda, Hellsing | Naikon | 18 | 29 | |||
| TEMP.Periscope, TEMP.Jumper, APT 40, APT40, BRONZE MOHAWK | Leviathan | 16 | 44 | |||
| Operation Cleaver, Tarh Andishan, Alibaba, 2889, TG-2889, Cobalt Gypsy, Rocket_Kitten, Cutting Kitten, Group 41, Magic Hound, APT35, APT 35, TEMP.Beanie, Ghambar | Cleaver | 13 | 28 | |||
| APT10, APT 10, MenuPass, Menupass Team, menuPass, menuPass Team, happyyongzi, POTASSIUM, DustStorm, Red Apollo, CVNX, HOGFISH, Cloud Hopper | Stone Panda | 13 | 49 | |||
| Twisted Kitten, Cobalt Gypsy, Crambus, Helix Kitten, APT 34, APT34, IRN2 | OilRig | 12 | 23 | |||
| OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo | APT32 | 11 | 33 | |||
| APT 33, Elfin, MAGNALLIUM, Refined Kitten | APT33 | 10 | 38 | |||
| APT30 | APT 30 | 10 | 10 | |||
| OilRig, Greenbug | CHRYSENE | 10 | 24 | |||
| APT33 | MAGNALLIUM | 10 | 38 | |||
| C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis | Operation C-Major | 10 | 29 | |||
| Tilded Team, Lamberts, EQGRP, Longhorn | Equation Group | 9 | 16 | |||
| APT 37, Group 123, Group123, Starcruft, Reaper, Reaper Group, Red Eyes, Ricochet Chollima, StarCruft, Operation Daybreak, Operation Erebus, Venus 121 | APT37 | 8 | 16 | |||
| Dukes, Group 100, Cozy Duke, CozyDuke, EuroAPT, CozyBear, CozyCar, Cozer, Office Monkeys, OfficeMonkeys, APT29, Cozy Bear, The Dukes, Minidionis, SeaDuke, Hammer Toss, YTTRIUM, Iron Hemlock, Grizzly Steppe | APT 29 | 8 | 25 | |||
| Chinastrats, Patchwork, Monsoon, Sarit, Quilted Tiger, APT-C-09 | Dropping Elephant | 8 | 23 | |||
| TEMP.Beanie, Operation Woolen Goldfish, Operation Woolen-Goldfish, Thamar Reservoir, Timberworm | Rocket Kitten | 8 | 17 | |||
| Moafee | DragonOK | 7 | 18 | |||
| Sandworm | ELECTRUM | 7 | 21 | |||
| TG-3390, APT 27, TEMP.Hippo, Group 35, Bronze Union, ZipToken, HIPPOTeam, APT27, Operation Iron Tiger, Iron Tiger APT, BRONZE UNION | Emissary Panda | 7 | 21 | |||
| Black Vine, TEMP.Avengers, Zirconium, APT 31, APT31 | Hurricane Panda | 7 | 25 | |||
| Emissary Panda, APT27, APT 27, Threat Group 3390, Bronze Union, Iron Tiger, TG-3390, TEMP.Hippo, Group 35, ZipToken | LuckyMouse | 7 | 21 | |||
| Vixen Panda, Ke3Chang, GREF, Playful Dragon, APT 15, APT15, Metushy, Lurid, Social Network Team, Royal APT | Mirage | 7 | 29 | |||
| Sandworm | TeleBots | 7 | 14 | |||
| TG-3390, Emissary Panda | Threat Group-3390 | 7 | 21 | |||
| Gothic Panda, TG-0110, APT 3, Group 6, UPS Team, APT3, Buckeye, Boyusec | UPS | 7 | 17 | |||
| APT 34 | APT34 | 6 | 12 | |||
| Dragonfly, Crouching Yeti, Group 24, Havex, CrouchingYeti, Koala Team | Energetic Bear | 6 | 15 | |||
| Sandworm Team, Black Energy, BlackEnergy, Quedagh, Voodoo Bear, TEMP.Noble, Iron Viking | Sandworm | 6 | 13 | |||
| Gorgon Group, Subaat | The Gorgon Group | 6 | 29 | |||
| TA505 | 5 | 81 | ||||
| Operation Tropic Trooper, Operation TropicTrooper, TropicTrooper | Tropic Trooper | 5 | 20 | |||
| APT 17, Deputy Dog, Group 8, APT17, Hidden Lynx, Tailgater Team, Dogfish | Aurora Panda | 4 | 7 | |||
| Winnti Group, Tailgater Team, Group 72, Group72, Tailgater, Ragebeast, Blackfly, Lead, Wicked Spider, APT17, APT 17, Dogfish, Deputy Dog, Wicked Panda, Barium | Axiom | 4 | 9 | |||
| Cobalt group, Cobalt Group, Cobalt gang, Cobalt Gang, GOLD KINGSWOOD, Cobalt Spider | Cobalt | 4 | 20 | |||
| Skeleton Spider | FIN6 | 4 | 31 | |||
| Numbered Panda, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, APT12, APT 12 | IXESHE | 4 | 12 | |||
| Admin338, Team338, MAGNESIUM, admin@338 | Temper Panda | 4 | 6 | |||
| Thrip | 4 | 16 | ||||
| Bronze Butler, RedBaldKnight | Tick | 4 | 10 | |||
| APT 31, ZIRCONIUM | APT31 | 3 | 13 | |||
| APT 39, Chafer | APT39 | 3 | 9 | |||
| DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25 | DarkHotel | 3 | 20 | |||
| Goblin Panda, Cycldek | Hellsing | 3 | 10 | |||
| Lamberts, the Lamberts | Longhorn | 3 | 5 | |||
| Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight | Molerats | 3 | 7 | |||
| TEMP.Zagros, Static Kitten, Seedworm | MuddyWater | 3 | 4 | |||
| TwoForOne | PLATINUM | 3 | 3 | |||
| Animal Farm, Snowglobe | SNOWGLOBE | 3 | 5 | |||
| APT16, SVCMONDR | APT 16 | 2 | 2 | |||
| Chafer | 2 | 8 | ||||
| LazyMeerkat | DarkHydrus | 2 | 2 | |||
| DNSpionage | 2 | 3 | ||||
| Greenbug | 2 | 8 | ||||
| GreyEnergy | 2 | 8 | ||||
| INDRIK SPIDER | 2 | 54 | ||||
| Lunar Spider | 2 | 27 | ||||
| PittyTiger, MANGANESE | Pitty Panda | 2 | 2 | |||
| Rancor group, Rancor, Rancor Group | RANCOR | 2 | 4 | |||
| Silence | Silence group | 2 | 24 | |||
| Sowbug | 2 | 2 | ||||
| Dynamite Panda, TG-0416, APT 18, SCANDIUM, PLA Navy, APT18 | Wekby | 2 | 2 | |||
| Winnti Umbrella | 2 | 16 | ||||
| WIZARD SPIDER | 2 | 26 | ||||
| GoldMouse | APT-C-27 | 1 | 1 | |||
| DoNot Team, Donot Team, APT-C-35 | APT-C-35 | 1 | 8 | |||
| Blind Eagle | APT-C-36 | 1 | 2 | |||
| APT 35, Newscaster Team | APT35 | 1 | 3 | |||
| Desert Falcon, Arid Viper, APT-C-23 | AridViper | 1 | 1 | |||
| Bahamut | 1 | 3 | ||||
| Boss Spider | 1 | 4 | ||||
| Newscaster, Parastoo, iKittens, Group 83, Newsbeef, NewsBeef | Charming Kitten | 1 | 1 | |||
| C0d0so, APT19, APT 19, Sunshop Group | Codoso | 1 | 15 | |||
| Slayer Kitten | CopyKittens | 1 | 15 | |||
| Danti | 1 | 1 | ||||
| Dark Caracal | 1 | 1 | ||||
| Dust Storm | 1 | 1 | ||||
| Gamaredon Group | 1 | 1 | ||||
| GRIM SPIDER | 1 | 8 | ||||
| Group 27 | 1 | 4 | ||||
| Guru Spider | 1 | 5 | ||||
| Iron Cyber Group | Iron Group | 1 | 1 | |||
| Spring Dragon, ST Group, Esile, DRAGONFISH | Lotus Blossom | 1 | 2 | |||
| MageCart | 1 | 1 | ||||
| Superman | Mofang | 1 | 1 | |||
| TA542, Mummy Spider | MUMMY SPIDER | 1 | 22 | |||
| APT 21, APT21, TravNet | NetTraveler | 1 | 1 | |||
| Nexus Zeta | 1 | 1 | ||||
| Operation ShadowHammer | 1 | 1 | ||||
| Operation Sharpshooter | 1 | 1 | ||||
| Orangeworm | 1 | 3 | ||||
| Pacha Group | 1 | 1 | ||||
| Pinchy Spider | 1 | 16 | ||||
| Strider, Sauron, Project Sauron | ProjectSauron | 1 | 7 | |||
| StrongPity | PROMETHIUM | 1 | 3 | |||
| PLA Unit 61486, APT 2, APT2, Group 36, APT-2, MSUpdater, 4HCrew, SULPHUR, SearchFire, TG-6952 | Putter Panda | 1 | 1 | |||
| Salty Spider | 1 | 3 | ||||
| Deep Panda, WebMasters, APT 19, KungFu Kittens, Black Vine, Group 13, PinkPanther, Sh3llCr3w | Shell Crew | 1 | 15 | |||
| OperationTroy, Guardian of Peace, GOP, WHOis Team, Andariel, Subgroup: Andariel | Silent Chollima | 1 | 1 | |||
| Skeleton Spider | 1 | 4 | ||||
| CorporacaoXRat, CorporationXRat | TeamXRat | 1 | 2 | |||
| Tiny Spider | 1 | 5 | ||||
| Duqu Group | Unit 8200 | 1 | 2 | |||
| Butterfly, Morpho, Sphinx Moth | WildNeutron | 1 | 1 | |||
| XENOTIME | 1 | 1 | ||||
| Palmetto Fusion, Allanite | ALLANITE | |||||
| APT14, APT 14, QAZTeam, ALUMINUM | Anchor Panda | |||||
| Andromeda Spider | ||||||
| APT.3102 | ||||||
| APT5 | ||||||
| APT22 | APT 22 | |||||
| APT26, Hippo Team, JerseyMikes, Turbine Panda | APT 26 | |||||
| 1.php Group, APT6 | APT 6 | |||||
| Lion Soldiers Team, Phantom Turk | Aslan Neferler Tim | |||||
| Crescent and Star | Ayyıldız Tim | |||||
| Sneaky Panda, Elderwood, Elderwood Gang, SIG22 | Beijing Group | |||||
| Berserk Bear | ||||||
| Big Panda | ||||||
| Topgear, Comnie, BLACKGEAR | Blackgear | |||||
| BlackOasis | ||||||
| BlackTech | ||||||
| Cloudy Omega, Emdivi | Blue Termite | |||||
| Boulder Bear | ||||||
| BuhTrap | ||||||
| Cadelle | ||||||
| Callisto | ||||||
| The Mask, Mask, Ugly Face | Careto | |||||
| Group 41 | Clever Kitten | |||||
| Cloud Atlas | ||||||
| Cobalt Dickens | COBALT DICKENS | |||||
| Nahr Elbard, Nahr el bared | Cold River | |||||
| TunisianCyberArmy | Corsair Jackal | |||||
| Lazarus, Hidden Cobra | COVELLITE | |||||
| ITSecTeam, Threat Group 2889, TG-2889, Ghambar | Cutting Kitten | |||||
| Cyber Berkut | ||||||
| Islamic State Hacking Division, CCA, United Cyber Caliphate, UUC, CyberCaliphate | Cyber Caliphate Army | |||||
| Fraternal Jackal | Cyber fighters of Izz Ad-Din Al Qassam | |||||
| DarkVishnya | ||||||
| SyrianElectronicArmy, SEA | Deadeye Jackal | |||||
| Dextorous Spider | ||||||
| LadyBoyle | Dizzy Panda | |||||
| Domestic Kitten | ||||||
| Dungeon Spider | ||||||
| Dragonfly 2.0, Dragonfly2, Berserker Bear | DYMALLOY | |||||
| Electric Panda | ||||||
| Eloquent Panda | ||||||
| Machete | El Machete | |||||
| EvilPost | ||||||
| Operation EvilTraffic | EvilTraffic | |||||
| FASTCash | ||||||
| FIN10 | ||||||
| FIN5 | ||||||
| FIN8 | ||||||
| Flash Kitten | ||||||
| SaffronRose, Saffron Rose, AjaxSecurityTeam, Ajax Security Team, Group 26, Sayad | Flying Kitten | |||||
| Foxy Panda | ||||||
| Fxmsp | ||||||
| Gallmaker | ||||||
| Golden Chickens, Golden Chickens01, Golden Chickens 01 | GC01 | |||||
| Golden Chickens, Golden Chickens02, Golden Chickens 02 | GC02 | |||||
| GCMAN | ||||||
| Snooping Dragon | GhostNet | |||||
| Ghost Jackal | ||||||
| Gibberish Panda | ||||||
| Gnosticplayers | ||||||
| GozNym | ||||||
| Groundbait | ||||||
| Group5 | ||||||
| Hacking Team | ||||||
| Zhenbao, TEMP.Zhenbao | Hammer Panda | |||||
| HenBox | ||||||
| Honeybee | ||||||
| HookAds | ||||||
| HummingBad | ||||||
| IceFog, Dagger Panda | Ice Fog | |||||
| Impersonating Panda | ||||||
| Inception Framework | ||||||
| Operation Mermaid, Prince of Persia | Infy | |||||
| IRIDIUM | ||||||
| Judgment Panda | ||||||
| Karma Panda | ||||||
| temp.bottle | Keyhole Panda | |||||
| Kimsuky, Velvet Chollima | Kimsuki | |||||
| Kryptonite Panda | ||||||
| Libyan Scorpions | ||||||
| Elise | Lotus Panda | |||||
| Lucky Cat | ||||||
| Madi | ||||||
| Group 42 | Magic Kitten | |||||
| Magnetic Spider | ||||||
| Reuse team, Dancing Salome | Malware reusers | |||||
| Mana Team | ||||||
| PLA Navy, Sykipot | Maverick Panda | |||||
| Microcin | ||||||
| MoneyTaker | ||||||
| Mustang Panda | ||||||
| NEODYMIUM | ||||||
| APT 9, Flowerlady/Flowershow, Flowerlady, Flowershow | Nightshade Panda | |||||
| Night Dragon | ||||||
| Covert Grove | Nitro | |||||
| Nomad Panda | ||||||
| OnionDog | ||||||
| Operation BugDrop | ||||||
| Operation Comando | ||||||
| Operation Kabar Cobra | ||||||
| Operation Parliament | ||||||
| Operation Poison Needles | ||||||
| OurMine | ||||||
| Packrat | ||||||
| Pale Panda | ||||||
| PassCV | ||||||
| APT23, APT 23, KeyBoy | Pirate Panda | |||||
| DD4BC, Ambiorx | Pizzo Spider | |||||
| Poisonous Panda | ||||||
| Poseidon Group | ||||||
| PowerPool | ||||||
| Predator Panda | ||||||
| Shrouded Crossbow | Radio Panda | |||||
| LeafMiner, Raspite | RASPITE | |||||
| Ratpak Spider | ||||||
| FallagaTeam | Rebel Jackal | |||||
| RedAlpha | ||||||
| the Rocra | Red October | |||||
| Roaming Mantis Group | Roaming Mantis | |||||
| Roaming Tiger | ||||||
| Rocke | ||||||
| RTM | ||||||
| Sabre Panda | ||||||
| PLA Navy, APT4, APT 4, Wisp Team, Getkys, SykipotGroup, Wkysol | Samurai Panda | |||||
| SandCat | ||||||
| Sands Casino | ||||||
| Sath-ı Müdafaa | ||||||
| Operation Daybreak, Operation Erebus | ScarCruft | |||||
| Scarlet Mimic | ||||||
| Sea Turtle | ||||||
| Shadow Network | ||||||
| Shark Spider | ||||||
| Siesta | ||||||
| COBALT DICKENS, Mabna Institute | Silent Librarian | |||||
| SilverTerrier | ||||||
| Sima | ||||||
| Singing Spider | ||||||
| Slingshot | ||||||
| Snake Wine | ||||||
| Spicy Panda | ||||||
| Stalker Panda | ||||||
| STARDUST CHOLLIMA | ||||||
| FruityArmor | Stealth Falcon | |||||
| STOLEN PENCIL | ||||||
| Subaat | ||||||
| Suckfly | ||||||
| SVCMONDR | ||||||
| TA459 | ||||||
| TA530 | ||||||
| Taidoor | ||||||
| TeamSpy, Team Bear, Berserk Bear, Anger Bear | TeamSpy Crew | |||||
| TEMP.Hermit | ||||||
| Xenotime | TEMP.Veles | |||||
| TempTick | ||||||
| TERBIUM | ||||||
| Test Panda | ||||||
| The Big Bang | ||||||
| The ShadowBrokers, TSB, Shadow Brokers, ShadowBrokers | The Shadow Brokers | |||||
| Tonto Team | ||||||
| Toxic Panda | ||||||
| Turk Hack Team | TurkHackTeam | |||||
| Union Panda | ||||||
| Union Spider | ||||||
| Unnamed Actor | ||||||
| Appin, OperationHangover | Viceroy Tiger | |||||
| Vikingdom | Viking Jackal | |||||
| APT20, APT 20, APT8, APT 8, TH3Bug | Violin Panda | |||||
| Reuse team, Malware reusers, Dancing Salome | Volatile Cedar | |||||
| Wet Panda | ||||||
| Whitefly | ||||||
| Skipper Turla | White Bear | |||||
| WindShift | ||||||
| FIN4 | Wolf Spider | |||||
| Zombie Spider | ||||||
| ZooPark | ||||||
| [Unnamed group] | ||||||
| [Vault 7/8] | ||||||
| Stealth Mango and Tangelo | ||||||