The following table provides a mapping of the actor groups tracked by the MISP Galaxy Project, augmented with the families covered in Malpedia.
| Operation DarkSeoul, Dark Seoul, Hidden Cobra, Hastati Group, Andariel, Unit 121, Bureau 121, NewRomanic Cyber Army Team, Bluenoroff, Subgroup: Bluenoroff, Group 77, Labyrinth Chollima, Operation Troy, Operation GhostSecret, Operation AppleJeus, APT38, APT 38, Stardust Chollima, Whois Hacking Team, Zinc, Appleworm, Nickel Academy, APT-C-26, NICKEL GLADSTONE | Lazarus Group | 63 | 160 | |||
| Comment Panda, PLA Unit 61398, APT 1, APT1, Advanced Persistent Threat 1, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, Shanghai Group | Comment Crew | 35 | 35 | |||
| Winnti Umbrella, Winnti Group, WinNTI, Tailgater Team, Suckfly, APT41, APT 41, Group 72, Group72, Tailgater, Ragebeast, Blackfly, Lead, Wicked Spider, APT17, APT 17, Dogfish, Deputy Dog, Wicked Panda, Barium, BRONZE ATLAS, BRONZE EXPORT | Axiom | 25 | 72 | |||
| Turla, Snake, Venomous Bear, VENOMOUS Bear, Group 88, Waterbug, WRAITH, Turla Team, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, Iron Hunter, MAKERSMARK | Turla Group | 24 | 90 | |||
| PLA Unit 78020, APT 30, APT30, Override Panda, Camerashy, APT.Naikon, Lotus Panda, Hellsing, BRONZE GENEVA | Naikon | 23 | 42 | |||
| APT 28, APT28, Pawn Storm, PawnStorm, Fancy Bear, Sednit, SNAKEMACKEREL, TsarTeam, Tsar Team, TG-4127, Group-4127, STRONTIUM, TAG_0700, Swallowtail, IRON TWILIGHT, Group 74, SIG40, Grizzly Steppe, apt_sofacy | Sofacy | 22 | 191 | |||
| Carbanak, Carbon Spider, FIN7, GOLD NIAGARA | Anunak | 21 | 47 | |||
| Twisted Kitten, Cobalt Gypsy, Crambus, Helix Kitten, APT 34, APT34, IRN2 | OilRig | 20 | 41 | |||
| APT41 | 19 | 58 | ||||
| TEMP.Periscope, TEMP.Jumper, APT 40, APT40, BRONZE MOHAWK, GADOLINIUM, Kryptonite Panda | Leviathan | 18 | 59 | |||
| OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo, POND LOACH, TIN WOODLAWN | APT32 | 15 | 44 | |||
| Dukes, Group 100, Cozy Duke, CozyDuke, EuroAPT, CozyBear, CozyCar, Cozer, Office Monkeys, OfficeMonkeys, APT29, Cozy Bear, The Dukes, Minidionis, SeaDuke, Hammer Toss, YTTRIUM, Iron Hemlock, Grizzly Steppe | APT 29 | 15 | 38 | |||
| APT10, APT 10, MenuPass, Menupass Team, menuPass, menuPass Team, happyyongzi, POTASSIUM, DustStorm, Red Apollo, CVNX, HOGFISH, Cloud Hopper, BRONZE RIVERSIDE | Stone Panda | 15 | 70 | |||
| Operation Cleaver, Tarh Andishan, Alibaba, 2889, TG-2889, Cobalt Gypsy, Rocket_Kitten, Cutting Kitten, Group 41, Magic Hound, APT35, APT 35, TEMP.Beanie, Ghambar | Cleaver | 14 | 29 | |||
| APT 33, Elfin, MAGNALLIUM, Refined Kitten, HOLMIUM, COBALT TRINITY | APT33 | 13 | 46 | |||
| APT33 | MAGNALLIUM | 13 | 46 | |||
| APT 34 | APT34 | 12 | 28 | |||
| APT30 | APT 30 | 12 | 12 | |||
| OilRig, Greenbug | CHRYSENE | 12 | 27 | |||
| C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis, Green Havildar, COPPER FIELDSTONE | Operation C-Major | 12 | 33 | |||
| SectorJ04 Group, GRACEFUL SPIDER, GOLD TAHOE | TA505 | 12 | 148 | |||
| Vixen Panda, Ke3Chang, GREF, Playful Dragon, APT 15, APT15, Metushy, Lurid, Social Network Team, Royal APT, BRONZE PALACE | Mirage | 11 | 51 | |||
| APT 37, Group 123, Group123, Starcruft, Reaper, Reaper Group, Red Eyes, Ricochet Chollima, StarCruft, Operation Daybreak, Operation Erebus, Venus 121 | APT37 | 9 | 17 | |||
| Tilded Team, Lamberts, EQGRP, Longhorn, PLATINUM TERMINAL | Equation Group | 9 | 24 | |||
| Chinastrats, Patchwork, Monsoon, Sarit, Quilted Tiger, APT-C-09, ZINC EMERSON | Dropping Elephant | 8 | 31 | |||
| Skeleton Spider, ITG08 | FIN6 | 8 | 66 | |||
| APT23, APT 23, KeyBoy, TropicTrooper, Tropic Trooper, BRONZE HOBART | Pirate Panda | 8 | 24 | |||
| TEMP.Beanie, Operation Woolen Goldfish, Operation Woolen-Goldfish, Thamar Reservoir, Timberworm | Rocket Kitten | 8 | 17 | |||
| Sandworm | TeleBots | 8 | 17 | |||
| Bronze Butler, RedBaldKnight | Tick | 8 | 14 | |||
| Gothic Panda, TG-0110, APT 3, Group 6, UPS Team, APT3, Buckeye, Boyusec, BORON, BRONZE MAYFAIR | UPS | 8 | 23 | |||
| Cobalt group, Cobalt Group, Cobalt gang, Cobalt Gang, GOLD KINGSWOOD, Cobalt Spider | Cobalt | 7 | 43 | |||
| Moafee, BRONZE OVERBROOK | DragonOK | 7 | 25 | |||
| Sandworm | ELECTRUM | 7 | 23 | |||
| TG-3390, APT 27, TEMP.Hippo, Group 35, Bronze Union, ZipToken, HIPPOTeam, APT27, Operation Iron Tiger, Iron Tiger APT, BRONZE UNION, Lucky Mouse | Emissary Panda | 7 | 29 | |||
| Emissary Panda, APT27, APT 27, Threat Group 3390, Bronze Union, Iron Tiger, TG-3390, TEMP.Hippo, Group 35, ZipToken | LuckyMouse | 7 | 29 | |||
| Gorgon Group, Subaat | The Gorgon Group | 7 | 40 | |||
| TG-3390, Emissary Panda | Threat Group-3390 | 7 | 29 | |||
| APT 17, Deputy Dog, Group 8, APT17, Hidden Lynx, Tailgater Team, Dogfish, BRONZE KEYSTONE | Aurora Panda | 6 | 24 | |||
| DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25, TUNGSTEN BRIDGE, T-APT-02 | DarkHotel | 6 | 27 | |||
| Dragonfly, Crouching Yeti, Group 24, Havex, CrouchingYeti, Koala Team, IRON LIBERTY | Energetic Bear | 6 | 15 | |||
| Black Vine, TEMP.Avengers | Hurricane Panda | 6 | 28 | |||
| Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight, ALUMINUM SARATOGA | Molerats | 6 | 10 | |||
| Sandworm Team, Black Energy, BlackEnergy, Quedagh, Voodoo Bear, TEMP.Noble, Iron Viking | Sandworm | 6 | 15 | |||
| Goblin Panda, Conimes, Cycldek | Hellsing | 5 | 17 | |||
| HenBox | 5 | 5 | ||||
| PLA Navy, Wisp Team | Samurai Panda | 5 | 19 | |||
| APT 31, ZIRCONIUM, JUDGMENT PANDA, BRONZE VINEWOOD | APT31 | 4 | 20 | |||
| CIRCUIT PANDA, Temp.Overboard, HUAPI | BlackTech | 4 | 13 | |||
| Calypso, Calypso APT | Calypso group | 4 | 16 | |||
| GALLIUM | 4 | 10 | ||||
| Numbered Panda, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, APT12, APT 12, BRONZE GLOBE | IXESHE | 4 | 12 | |||
| TEMP.Zagros, Static Kitten, Seedworm, MERCURY, COBALT ULSTER | MuddyWater | 4 | 6 | |||
| Admin338, Team338, MAGNESIUM, admin@338 | Temper Panda | 4 | 6 | |||
| LOTUS PANDA | Thrip | 4 | 16 | |||
| badbullzvenom | VENOM SPIDER | 4 | 4 | |||
| TEMP.MixMaster | WIZARD SPIDER | 4 | 59 | |||
| APT 39, Chafer, REMIX KITTEN, COBALT HICKMAN | APT39 | 3 | 9 | |||
| Newscaster, Parastoo, iKittens, Group 83, Newsbeef, NewsBeef | Charming Kitten | 3 | 5 | |||
| TwoForOne | PLATINUM | 3 | 13 | |||
| Rancor group, Rancor, Rancor Group | RANCOR | 3 | 5 | |||
| Animal Farm, Snowglobe | SNOWGLOBE | 3 | 5 | |||
| SWEED | 3 | 29 | ||||
| DoNot Team, Donot Team, APT-C-35 | APT-C-35 | 2 | 17 | |||
| Blind Eagle | APT-C-36 | 2 | 12 | |||
| APT 35, Newscaster Team | APT35 | 2 | 4 | |||
| APT16, SVCMONDR | APT 16 | 2 | 2 | |||
| APT22, BRONZE OLIVE | APT 22 | 2 | 15 | |||
| APT26, Hippo Team, JerseyMikes, Turbine Panda, BRONZE EXPRESS | APT 26 | 2 | 17 | |||
| Desert Falcon, Arid Viper, APT-C-23 | AridViper | 2 | 2 | |||
| LazyMeerkat | DarkHydrus | 2 | 2 | |||
| Dark Caracal | 2 | 2 | ||||
| COBALT EDGEWATER | DNSpionage | 2 | 4 | |||
| Primitive Bear | Gamaredon Group | 2 | 2 | |||
| Greenbug | 2 | 8 | ||||
| GreyEnergy | 2 | 8 | ||||
| Inception Framework | 2 | 4 | ||||
| INDRIK SPIDER | 2 | 60 | ||||
| Karma Panda | 2 | 2 | ||||
| Lamberts, the Lamberts, APT-C-39 | Longhorn | 2 | 6 | |||
| GOLD SWATHMORE | Lunar Spider | 2 | 28 | |||
| TA542, Mummy Spider, GOLD CRESTWOOD | MUMMY SPIDER | 2 | 29 | |||
| APT 21, APT21, TravNet | NetTraveler | 2 | 14 | |||
| APT 9, Flowerlady/Flowershow, Flowerlady, Flowershow | Nightshade Panda | 2 | 16 | |||
| Pinchy Spider | 2 | 48 | ||||
| PittyTiger, MANGANESE | Pitty Panda | 2 | 2 | |||
| Evil Eye | POISON CARP | 2 | 2 | |||
| Silence, Silence APT group, WHISPER SPIDER | Silence group | 2 | 26 | |||
| Sowbug | 2 | 2 | ||||
| IMPERIAL KITTEN | Tortoiseshell | 2 | 2 | |||
| APT20, APT 20, TH3Bug, Twivy | Violin Panda | 2 | 14 | |||
| Dynamite Panda, TG-0416, APT 18, SCANDIUM, PLA Navy, APT18 | Wekby | 2 | 3 | |||
| Winnti Umbrella | 2 | 16 | ||||
| Sapphire Mushroom, Blue Mushroom, NuclearCrisis | APT-C-12 | 1 | 1 | |||
| GoldMouse | APT-C-27 | 1 | 1 | |||
| Golden Falcon | APT-C-34 | 1 | 7 | |||
| Bahamut | 1 | 3 | ||||
| GOLD LOWELL | Boss Spider | 1 | 4 | |||
| BuhTrap | 1 | 6 | ||||
| C0d0so, APT19, APT 19, Sunshop Group | Codoso | 1 | 15 | |||
| Slayer Kitten | CopyKittens | 1 | 15 | |||
| Danti | 1 | 1 | ||||
| Domestic Kitten | 1 | 1 | ||||
| DOPPEL SPIDER | 1 | 3 | ||||
| Dust Storm | 1 | 1 | ||||
| FIN8 | 1 | 3 | ||||
| APT-C-27 | Golden RAT | 1 | 1 | |||
| GOLD ULRICK | GRIM SPIDER | 1 | 14 | |||
| Groundbait | 1 | 27 | ||||
| Group 27 | 1 | 4 | ||||
| Guru Spider | 1 | 5 | ||||
| Hacking Team | 1 | 7 | ||||
| Higaisa | 1 | 1 | ||||
| IceFog, Dagger Panda, Trident | Ice Fog | 1 | 1 | |||
| Iron Cyber Group | Iron Group | 1 | 1 | |||
| Velvet Chollima, Black Banshee, Thallium, Operation Stolen Pencil | Kimsuky | 1 | 2 | |||
| Spring Dragon, ST Group, Esile, DRAGONFISH, BRONZE ELGIN | Lotus Blossom | 1 | 3 | |||
| MageCart | 1 | 3 | ||||
| Superman, BRONZE WALKER | Mofang | 1 | 1 | |||
| MONTY SPIDER | 1 | 12 | ||||
| BRONZE PRESIDENT, HoneyMyte, Red Lich | Mustang Panda | 1 | 13 | |||
| GOLD ESSEX | NARWHAL SPIDER | 1 | 3 | |||
| SIG37 | Nazar | 1 | 2 | |||
| Nexus Zeta | 1 | 1 | ||||
| Operation ShadowHammer | 1 | 1 | ||||
| Operation Sharpshooter | 1 | 1 | ||||
| Orangeworm | 1 | 3 | ||||
| Pacha Group | 1 | 1 | ||||
| Packrat | 1 | 1 | ||||
| Poseidon Group | 1 | 1 | ||||
| Strider, Sauron, Project Sauron | ProjectSauron | 1 | 7 | |||
| StrongPity | PROMETHIUM | 1 | 6 | |||
| PLA Unit 61486, APT 2, APT2, Group 36, APT-2, MSUpdater, 4HCrew, SULPHUR, SearchFire, TG-6952 | Putter Panda | 1 | 1 | |||
| Roaming Mantis Group | Roaming Mantis | 1 | 1 | |||
| Rocke | 1 | 1 | ||||
| Salty Spider | 1 | 3 | ||||
| Scarlet Mimic | 1 | 1 | ||||
| SCULLY SPIDER | 1 | 19 | ||||
| Deep Panda, WebMasters, APT 19, KungFu Kittens, Black Vine, Group 13, PinkPanther, Sh3llCr3w, BRONZE FIRESTONE | Shell Crew | 1 | 15 | |||
| OperationTroy, Guardian of Peace, GOP, WHOis Team, Andariel, Subgroup: Andariel | Silent Chollima | 1 | 1 | |||
| Skeleton Spider | 1 | 4 | ||||
| SMOKY SPIDER | 1 | 23 | ||||
| TA2101 | 1 | 24 | ||||
| TA410 | 1 | 1 | ||||
| TA428 | 1 | 1 | ||||
| CorporacaoXRat, CorporationXRat | TeamXRat | 1 | 2 | |||
| Tiny Spider | 1 | 5 | ||||
| Tonto Team | 1 | 1 | ||||
| Duqu Group | Unit 8200 | 1 | 5 | |||
| Butterfly, Morpho, Sphinx Moth | WildNeutron | 1 | 1 | |||
| WindShift | 1 | 4 | ||||
| XENOTIME | 1 | 1 | ||||
| Palmetto Fusion, Allanite | ALLANITE | |||||
| APT14, APT 14, QAZTeam, ALUMINUM | Anchor Panda | |||||
| Andromeda Spider | ||||||
| Empire Monkey, CobaltGoblin | ANTHROPOID SPIDER | |||||
| APT.3102 | ||||||
| MANGANESE, BRONZE FLEETWOOD | APT5 | |||||
| 1.php Group, APT6 | APT 6 | |||||
| Lion Soldiers Team, Phantom Turk | Aslan Neferler Tim | |||||
| Attor | ||||||
| Crescent and Star | Ayyıldız Tim | |||||
| Sneaky Panda, Elderwood, Elderwood Gang, SIG22 | Beijing Group | |||||
| Berserk Bear | ||||||
| Big Panda | ||||||
| Topgear, Comnie, BLACKGEAR | Blackgear | |||||
| BlackOasis | ||||||
| Cloudy Omega, Emdivi | Blue Termite | |||||
| Boulder Bear | ||||||
| BRONZE PRESIDENT | ||||||
| Budminer cyberespionage group | Budminer | |||||
| Cadelle | ||||||
| Callisto | ||||||
| The Mask, Mask, Ugly Face | Careto | |||||
| Group 41 | Clever Kitten | |||||
| CLOCKWORD SPIDER | ||||||
| Cloud Atlas | ||||||
| Cobalt Dickens | COBALT DICKENS | |||||
| APT-C-38 (QiAnXin), SABER LION, TG-2884 (SCWX CTU) | COBALT JUNO | |||||
| Hive0081 (IBM), SectorD01 (NHSC), xHunt campaign (Palo Alto) | COBALT KATANA | |||||
| Nahr Elbard, Nahr el bared | Cold River | |||||
| TunisianCyberArmy | Corsair Jackal | |||||
| Lazarus, Hidden Cobra | COVELLITE | |||||
| ITSecTeam, Threat Group 2889, TG-2889, Ghambar | Cutting Kitten | |||||
| Cyber Berkut | ||||||
| Islamic State Hacking Division, CCA, United Cyber Caliphate, UUC, CyberCaliphate | Cyber Caliphate Army | |||||
| Fraternal Jackal | Cyber fighters of Izz Ad-Din Al Qassam | |||||
| DarkVishnya | ||||||
| SyrianElectronicArmy, SEA | Deadeye Jackal | |||||
| DePriMon | ||||||
| Dextorous Spider | ||||||
| LadyBoyle | Dizzy Panda | |||||
| Dungeon Spider | ||||||
| Dragonfly 2.0, Dragonfly2, Berserker Bear | DYMALLOY | |||||
| Electric Panda | ||||||
| Eloquent Panda | ||||||
| Machete, machete-apt | El Machete | |||||
| EvilPost | ||||||
| Operation EvilTraffic | EvilTraffic | |||||
| FASTCash | ||||||
| FIN1 | ||||||
| FIN10 | ||||||
| FIN5 | ||||||
| Flash Kitten | ||||||
| SaffronRose, Saffron Rose, AjaxSecurityTeam, Ajax Security Team, Group 26, Sayad | Flying Kitten | |||||
| Foxy Panda | ||||||
| Fxmsp | ||||||
| Gallmaker | ||||||
| Golden Chickens, Golden Chickens01, Golden Chickens 01 | GC01 | |||||
| Golden Chickens, Golden Chickens02, Golden Chickens 02 | GC02 | |||||
| GCMAN | ||||||
| Snooping Dragon | GhostNet | |||||
| Ghost Jackal | ||||||
| Gibberish Panda | ||||||
| Gnosticplayers | ||||||
| GozNym | ||||||
| Group5 | ||||||
| Zhenbao, TEMP.Zhenbao | Hammer Panda | |||||
| Honeybee | ||||||
| HookAds | ||||||
| HummingBad | ||||||
| Impersonating Panda | ||||||
| Operation Mermaid, Prince of Persia | Infy | |||||
| InvisiMole | ||||||
| IRIDIUM | ||||||
| DarkUniverse, SIG27 | ItaDuke | |||||
| temp.bottle | Keyhole Panda | |||||
| Libyan Scorpions | ||||||
| Elise | Lotus Panda | |||||
| Lucky Cat | ||||||
| luoxk | ||||||
| COBALT LYCEUM | LYCEUM | |||||
| Madi | ||||||
| Group 42, VOYEUR | Magic Kitten | |||||
| Magnetic Spider | ||||||
| Reuse team, Dancing Salome | Malware reusers | |||||
| Mana Team | ||||||
| PLA Navy, APT4, APT 4, BRONZE EDISON, Sykipot | Maverick Panda | |||||
| SixLittleMonkeys | Microcin | |||||
| MoneyTaker | ||||||
| NEODYMIUM | ||||||
| Night Dragon | ||||||
| Covert Grove | Nitro | |||||
| NOCTURNAL SPIDER | ||||||
| Nomad Panda | ||||||
| NOTROBIN | ||||||
| OnionDog | ||||||
| Operation BugDrop | ||||||
| Operation Comando | ||||||
| Operation Kabar Cobra | ||||||
| Operation Parliament | ||||||
| Operation Poison Needles | ||||||
| Operation Shadow Force | ||||||
| Operation Soft Cell | ||||||
| Operation WizardOpium | ||||||
| Operation Wocao | ||||||
| OurMine | ||||||
| Pale Panda | ||||||
| PassCV | ||||||
| DD4BC, Ambiorx | Pizzo Spider | |||||
| Poisonous Panda | ||||||
| PowerPool | ||||||
| Predator Panda | ||||||
| Shrouded Crossbow | Radio Panda | |||||
| LeafMiner, Raspite | RASPITE | |||||
| Ratpak Spider | ||||||
| FallagaTeam | Rebel Jackal | |||||
| RedAlpha | ||||||
| the Rocra | Red October | |||||
| BRONZE WOODLAND, Rotten Tomato | Roaming Tiger | |||||
| RTM | ||||||
| Sabre Panda | ||||||
| SandCat | ||||||
| Sands Casino | ||||||
| Sath-ı Müdafaa | ||||||
| Operation Daybreak, Operation Erebus | ScarCruft | |||||
| Sea Turtle | ||||||
| SectorJ04 | ||||||
| Shadow Network | ||||||
| Shark Spider | ||||||
| SideWinder | ||||||
| Siesta | ||||||
| COBALT DICKENS, Mabna Institute, TA407 | Silent Librarian | |||||
| SilverTerrier | ||||||
| Sima | ||||||
| Singing Spider | ||||||
| Slingshot | ||||||
| Snake Wine | ||||||
| Spicy Panda | ||||||
| Stalker Panda | ||||||
| STARDUST CHOLLIMA | ||||||
| FruityArmor | Stealth Falcon | |||||
| Subaat | ||||||
| Suckfly | ||||||
| SVCMONDR | ||||||
| TA459 | ||||||
| TA530 | ||||||
| Taidoor | ||||||
| TeamSpy, Team Bear, Berserk Bear, Anger Bear, IRON LYRIC | TeamSpy Crew | |||||
| TEMP.Hermit | ||||||
| Xenotime | TEMP.Veles | |||||
| TempTick | ||||||
| TERBIUM | ||||||
| Test Panda | ||||||
| The Big Bang | ||||||
| The ShadowBrokers, TSB, Shadow Brokers, ShadowBrokers | The Shadow Brokers | |||||
| Toxic Panda | ||||||
| Turk Hack Team | TurkHackTeam | |||||
| Union Panda | ||||||
| Union Spider | ||||||
| Unnamed Actor | ||||||
| ViceLeaker | ||||||
| Appin, OperationHangover | Viceroy Tiger | |||||
| Vikingdom | Viking Jackal | |||||
| Reuse team, Malware reusers, Dancing Salome | Volatile Cedar | |||||
| Wet Panda | ||||||
| Whitefly | ||||||
| Skipper Turla | White Bear | |||||
| FIN4 | Wolf Spider | |||||
| Zombie Spider | ||||||
| ZooPark | ||||||
| [Unnamed group] | ||||||
| [Vault 7/8] | ||||||
| Stealth Mango and Tangelo | ||||||