The following table provides a mapping of the actor groups tracked by the MISP Galaxy Project, augmented with the families covered in Malpedia.
Operation DarkSeoul, Dark Seoul, Hidden Cobra, Hastati Group, Andariel, Unit 121, Bureau 121, NewRomanic Cyber Army Team, Bluenoroff, Subgroup: Bluenoroff, Group 77, Labyrinth Chollima, Operation Troy, Operation GhostSecret, Operation AppleJeus, APT38, APT 38, Stardust Chollima, Whois Hacking Team, Zinc, Appleworm, Nickel Academy, APT-C-26, NICKEL GLADSTONE, COVELLITE | Lazarus Group | 72 | 174 | |||
Comment Panda, PLA Unit 61398, APT 1, APT1, Advanced Persistent Threat 1, Byzantine Candor, Group 3, TG-8223, Comment Group, Brown Fox, GIF89a, ShadyRAT, Shanghai Group | Comment Crew | 35 | 35 | |||
Winnti Umbrella, Winnti Group, Suckfly, APT41, APT 41, Group72, Group 72, Blackfly, LEAD, WICKED SPIDER, WICKED PANDA, BARIUM, BRONZE ATLAS, BRONZE EXPORT, Red Kelpie | Axiom | 26 | 79 | |||
Turla, Snake, Venomous Bear, VENOMOUS Bear, Group 88, Waterbug, WRAITH, Turla Team, Uroburos, Pfinet, TAG_0530, KRYPTON, Hippo Team, Pacifier APT, Popeye, SIG23, Iron Hunter, MAKERSMARK | Turla Group | 26 | 100 | |||
PLA Unit 78020, APT 30, APT30, Override Panda, Camerashy, APT.Naikon, Lotus Panda, Hellsing, BRONZE GENEVA | Naikon | 25 | 46 | |||
APT 28, APT28, Pawn Storm, PawnStorm, Fancy Bear, Sednit, SNAKEMACKEREL, TsarTeam, Tsar Team, TG-4127, Group-4127, STRONTIUM, TAG_0700, Swallowtail, IRON TWILIGHT, Group 74, SIG40, Grizzly Steppe, apt_sofacy | Sofacy | 24 | 195 | |||
Carbanak, Carbon Spider, FIN7, GOLD NIAGARA | Anunak | 23 | 49 | |||
Twisted Kitten, Cobalt Gypsy, Crambus, Helix Kitten, APT 34, APT34, IRN2 | OilRig | 21 | 45 | |||
TEMP.Periscope, TEMP.Jumper, APT 40, APT40, BRONZE MOHAWK, GADOLINIUM, Kryptonite Panda | Leviathan | 20 | 64 | |||
APT41 | 19 | 64 | ||||
APT10, APT 10, MenuPass, Menupass Team, menuPass, menuPass Team, happyyongzi, POTASSIUM, DustStorm, Red Apollo, CVNX, HOGFISH, Cloud Hopper, BRONZE RIVERSIDE | Stone Panda | 17 | 74 | |||
OceanLotus Group, Ocean Lotus, OceanLotus, Cobalt Kitty, APT-C-00, SeaLotus, Sea Lotus, APT-32, APT 32, Ocean Buffalo, POND LOACH, TIN WOODLAWN, BISMUTH | APT32 | 15 | 45 | |||
Dukes, Group 100, Cozy Duke, CozyDuke, EuroAPT, CozyBear, CozyCar, Cozer, Office Monkeys, OfficeMonkeys, APT29, Cozy Bear, The Dukes, Minidionis, SeaDuke, Hammer Toss, YTTRIUM, Iron Hemlock, Grizzly Steppe | APT 29 | 15 | 40 | |||
Operation Cleaver, Tarh Andishan, Alibaba, 2889, TG-2889, Cobalt Gypsy, Rocket_Kitten, Cutting Kitten, Group 41, Magic Hound, APT35, APT 35, TEMP.Beanie, Ghambar | Cleaver | 14 | 29 | |||
APT 33, Elfin, MAGNALLIUM, Refined Kitten, HOLMIUM, COBALT TRINITY | APT33 | 13 | 46 | |||
OilRig, Greenbug | CHRYSENE | 13 | 31 | |||
Tilded Team, Lamberts, EQGRP, Longhorn, PLATINUM TERMINAL | Equation Group | 13 | 33 | |||
APT33 | MAGNALLIUM | 13 | 46 | |||
APT 34 | APT34 | 12 | 29 | |||
APT30 | APT 30 | 12 | 12 | |||
C-Major, Transparent Tribe, Mythic Leopard, ProjectM, APT36, APT 36, TMP.Lapis, Green Havildar, COPPER FIELDSTONE | Operation C-Major | 12 | 38 | |||
SectorJ04 Group, GRACEFUL SPIDER, GOLD TAHOE | TA505 | 12 | 153 | |||
Vixen Panda, Ke3Chang, GREF, Playful Dragon, APT 15, APT15, Metushy, Lurid, Social Network Team, Royal APT, BRONZE PALACE | Mirage | 11 | 52 | |||
Sandworm | TeleBots | 10 | 25 | |||
APT 37, Group 123, Group123, ScarCruft, Reaper, Reaper Group, Red Eyes, Ricochet Chollima, Operation Daybreak, Operation Erebus, Venus 121 | APT37 | 9 | 17 | |||
Gaza Hackers Team, Gaza cybergang, Gaza Cybergang, Operation Molerats, Extreme Jackal, Moonlight, ALUMINUM SARATOGA | Molerats | 9 | 13 | |||
CIRCUIT PANDA, Temp.Overboard, HUAPI, Palmerworm | BlackTech | 8 | 19 | |||
DUBNIUM, Fallout Team, Karba, Luder, Nemim, Nemin, Tapaoux, Pioneer, Shadow Crane, APT-C-06, SIG25, TUNGSTEN BRIDGE, T-APT-02 | DarkHotel | 8 | 37 | |||
Chinastrats, Patchwork, Monsoon, Sarit, Quilted Tiger, APT-C-09, ZINC EMERSON | Dropping Elephant | 8 | 31 | |||
Skeleton Spider, ITG08 | FIN6 | 8 | 67 | |||
APT23, APT 23, KeyBoy, TropicTrooper, Tropic Trooper, BRONZE HOBART | Pirate Panda | 8 | 24 | |||
TEMP.Beanie, Operation Woolen Goldfish, Operation Woolen-Goldfish, Thamar Reservoir, Timberworm | Rocket Kitten | 8 | 17 | |||
Bronze Butler, RedBaldKnight | Tick | 8 | 14 | |||
Gothic Panda, TG-0110, APT 3, Group 6, UPS Team, APT3, Buckeye, Boyusec, BORON, BRONZE MAYFAIR | UPS | 8 | 24 | |||
Cobalt group, Cobalt Group, Cobalt gang, Cobalt Gang, GOLD KINGSWOOD, Cobalt Spider | Cobalt | 7 | 44 | |||
Moafee, BRONZE OVERBROOK | DragonOK | 7 | 26 | |||
Sandworm | ELECTRUM | 7 | 23 | |||
Goblin Panda, Conimes, Cycldek | Hellsing | 7 | 21 | |||
Emissary Panda, APT27, APT 27, Threat Group 3390, Bronze Union, Iron Tiger, TG-3390, TEMP.Hippo, Group 35, ZipToken | LuckyMouse | 7 | 30 | |||
Gorgon Group, Subaat | The Gorgon Group | 7 | 40 | |||
APT 17, Deputy Dog, Group 8, APT17, Hidden Lynx, Tailgater Team, Dogfish, BRONZE KEYSTONE | Aurora Panda | 6 | 25 | |||
TG-3390, APT 27, TEMP.Hippo, Group 35, Bronze Union, ZipToken, HIPPOTeam, APT27, Operation Iron Tiger, Iron Tiger APT, BRONZE UNION, Lucky Mouse | Emissary Panda | 6 | 29 | |||
Dragonfly, Crouching Yeti, Group 24, Havex, CrouchingYeti, Koala Team, IRON LIBERTY | Energetic Bear | 6 | 15 | |||
TEMP.Zagros, Static Kitten, Seedworm, MERCURY, COBALT ULSTER | MuddyWater | 6 | 8 | |||
Sandworm Team, Black Energy, BlackEnergy, Quedagh, Voodoo Bear, TEMP.Noble, Iron Viking | Sandworm | 6 | 15 | |||
TA428 | 6 | 20 | ||||
TG-3390, Emissary Panda | Threat Group-3390 | 6 | 29 | |||
CactusPete, Karma Panda, BRONZE HUNTLEY | Tonto Team | 6 | 26 | |||
HenBox | 5 | 5 | ||||
Black Vine, TEMP.Avengers | Hurricane Panda | 5 | 27 | |||
Velvet Chollima, Black Banshee, Thallium, Operation Stolen Pencil | Kimsuky | 5 | 9 | |||
PLA Navy, Wisp Team | Samurai Panda | 5 | 20 | |||
UNC1878 | 5 | 84 | ||||
DarkHalo, StellarParticle, NOBELIUM | UNC2452 | 5 | 24 | |||
APT 31, ZIRCONIUM, JUDGMENT PANDA, BRONZE VINEWOOD | APT31 | 4 | 21 | |||
APT 39, Chafer, REMIX KITTEN, COBALT HICKMAN | APT39 | 4 | 10 | |||
Calypso, Calypso APT | Calypso group | 4 | 17 | |||
GALLIUM | 4 | 10 | ||||
Numbered Panda, TG-2754, BeeBus, Group 22, DynCalc, Calc Team, DNSCalc, Crimson Iron, APT12, APT 12, BRONZE GLOBE | IXESHE | 4 | 12 | |||
Admin338, Team338, MAGNESIUM, admin@338 | Temper Panda | 4 | 6 | |||
LOTUS PANDA | Thrip | 4 | 16 | |||
badbullzvenom | VENOM SPIDER | 4 | 5 | |||
TEMP.MixMaster | WIZARD SPIDER | 4 | 59 | |||
Desert Falcon, Arid Viper, APT-C-23 | AridViper | 3 | 4 | |||
Newscaster, Parastoo, iKittens, Group 83, Newsbeef, NewsBeef | Charming Kitten | 3 | 5 | |||
LazyMeerkat | DarkHydrus | 3 | 17 | |||
Primitive Bear | Gamaredon Group | 3 | 3 | |||
BRONZE PRESIDENT, HoneyMyte, Red Lich | Mustang Panda | 3 | 18 | |||
TwoForOne | PLATINUM | 3 | 13 | |||
Rancor group, Rancor, Rancor Group | RANCOR | 3 | 5 | |||
Animal Farm, Snowglobe | SNOWGLOBE | 3 | 5 | |||
SWEED | 3 | 29 | ||||
TA413 | 3 | 4 | ||||
Winnti Umbrella | 3 | 17 | ||||
DoNot Team, Donot Team, APT-C-35 | APT-C-35 | 2 | 17 | |||
Blind Eagle | APT-C-36 | 2 | 12 | |||
APT 35, Newscaster Team | APT35 | 2 | 4 | |||
APT16, SVCMONDR | APT 16 | 2 | 2 | |||
APT22, BRONZE OLIVE | APT 22 | 2 | 16 | |||
APT26, Hippo Team, JerseyMikes, Turbine Panda, BRONZE EXPRESS | APT 26 | 2 | 18 | |||
Dark Caracal | 2 | 3 | ||||
COBALT EDGEWATER | DNSpionage | 2 | 4 | |||
Greenbug | 2 | 8 | ||||
GreyEnergy | 2 | 8 | ||||
Inception Framework | 2 | 4 | ||||
INDRIK SPIDER | 2 | 61 | ||||
Lamberts, the Lamberts, APT-C-39 | Longhorn | 2 | 6 | |||
GOLD SWATHMORE | Lunar Spider | 2 | 29 | |||
TA542, Mummy Spider, GOLD CRESTWOOD | MUMMY SPIDER | 2 | 32 | |||
APT 21, APT21, TravNet | NetTraveler | 2 | 15 | |||
APT 9, Flowerlady/Flowershow, Flowerlady, Flowershow | Nightshade Panda | 2 | 17 | |||
Pinchy Spider | 2 | 48 | ||||
PittyTiger, MANGANESE | Pitty Panda | 2 | 2 | |||
Evil Eye | POISON CARP | 2 | 2 | |||
PLA Unit 61486, APT 2, APT2, Group 36, APT-2, MSUpdater, 4HCrew, SULPHUR, SearchFire, TG-6952 | Putter Panda | 2 | 2 | |||
Rocke | 2 | 2 | ||||
Silence, Silence APT group, WHISPER SPIDER | Silence group | 2 | 26 | |||
Sowbug | 2 | 2 | ||||
IMPERIAL KITTEN | Tortoiseshell | 2 | 2 | |||
APT20, APT 20, TH3Bug, Twivy | Violin Panda | 2 | 15 | |||
Dynamite Panda, TG-0416, APT 18, SCANDIUM, PLA Navy, APT18 | Wekby | 2 | 3 | |||
Sapphire Mushroom, Blue Mushroom, NuclearCrisis | APT-C-12 | 1 | 1 | |||
GoldMouse | APT-C-27 | 1 | 1 | |||
Golden Falcon | APT-C-34 | 1 | 7 | |||
Bahamut | 1 | 3 | ||||
GOLD LOWELL | Boss Spider | 1 | 4 | |||
BuhTrap | 1 | 4 | ||||
C0d0so, APT19, APT 19, Sunshop Group | Codoso | 1 | 15 | |||
Slayer Kitten | CopyKittens | 1 | 15 | |||
Danti | 1 | 1 | ||||
Domestic Kitten | 1 | 4 | ||||
DOPPEL SPIDER | 1 | 4 | ||||
Dust Storm | 1 | 1 | ||||
Machete, machete-apt, APT-C-43 | El Machete | 1 | 1 | |||
DeathStalker | Evilnum | 1 | 1 | |||
Evil Corp | 1 | 55 | ||||
FIN8 | 1 | 3 | ||||
APT-C-27 | Golden RAT | 1 | 1 | |||
GOLD ULRICK | GRIM SPIDER | 1 | 14 | |||
Groundbait | 1 | 27 | ||||
Group 27 | 1 | 4 | ||||
Guru Spider | 1 | 5 | ||||
Hacking Team | 1 | 7 | ||||
Higaisa | 1 | 1 | ||||
IceFog, Dagger Panda, Trident | Ice Fog | 1 | 1 | |||
Operation Mermaid, Prince of Persia, Foudre | Infy | 1 | 1 | |||
Iron Cyber Group | Iron Group | 1 | 1 | |||
Spring Dragon, ST Group, Esile, DRAGONFISH, BRONZE ELGIN | Lotus Blossom | 1 | 3 | |||
MageCart | 1 | 3 | ||||
Superman, BRONZE WALKER | Mofang | 1 | 1 | |||
MONTY SPIDER | 1 | 12 | ||||
GOLD ESSEX | NARWHAL SPIDER | 1 | 3 | |||
SIG37 | Nazar | 1 | 2 | |||
Nexus Zeta | 1 | 1 | ||||
Operation ShadowHammer | 1 | 3 | ||||
Operation Sharpshooter | 1 | 1 | ||||
Orangeworm | 1 | 3 | ||||
Pacha Group | 1 | 1 | ||||
Packrat | 1 | 1 | ||||
Poseidon Group | 1 | 1 | ||||
IAmTheKing | PowerPool | 1 | 1 | |||
Strider, Sauron, Project Sauron | ProjectSauron | 1 | 7 | |||
StrongPity | PROMETHIUM | 1 | 6 | |||
Salty Spider | 1 | 3 | ||||
Scarlet Mimic | 1 | 1 | ||||
SCULLY SPIDER | 1 | 21 | ||||
Deep Panda, WebMasters, APT 19, KungFu Kittens, Black Vine, Group 13, PinkPanther, Sh3llCr3w, BRONZE FIRESTONE | Shell Crew | 1 | 15 | |||
OperationTroy, Guardian of Peace, GOP, WHOis Team, Andariel, Subgroup: Andariel | Silent Chollima | 1 | 1 | |||
Skeleton Spider | 1 | 4 | ||||
SMOKY SPIDER | 1 | 24 | ||||
TA2101 | 1 | 24 | ||||
TA410 | 1 | 1 | ||||
CorporacaoXRat, CorporationXRat | TeamXRat | 1 | 2 | |||
Tiny Spider | 1 | 5 | ||||
Duqu Group | Unit 8200 | 1 | 5 | |||
Butterfly, Morpho, Sphinx Moth | WildNeutron | 1 | 1 | |||
WindShift | 1 | 4 | ||||
XENOTIME | 1 | 1 | ||||
Palmetto Fusion, Allanite | ALLANITE | |||||
APT14, APT 14, QAZTeam, ALUMINUM | Anchor Panda | |||||
Andromeda Spider | ||||||
Empire Monkey, CobaltGoblin | ANTHROPOID SPIDER | |||||
APT.3102 | ||||||
MANGANESE, BRONZE FLEETWOOD | APT5 | |||||
1.php Group, APT6 | APT 6 | |||||
Lion Soldiers Team, Phantom Turk | Aslan Neferler Tim | |||||
Attor | ||||||
Crescent and Star | Ayyıldız Tim | |||||
Sneaky Panda, Elderwood, Elderwood Gang, SIG22 | Beijing Group | |||||
Berserk Bear | ||||||
Big Panda | ||||||
Topgear, Comnie, BLACKGEAR | Blackgear | |||||
BlackOasis | ||||||
Cloudy Omega, Emdivi | Blue Termite | |||||
Boulder Bear | ||||||
BRONZE PRESIDENT | ||||||
Budminer cyberespionage group | Budminer | |||||
Cadelle | ||||||
Callisto | ||||||
The Mask, Mask, Ugly Face | Careto | |||||
Group 41 | Clever Kitten | |||||
CLOCKWORD SPIDER | ||||||
Cloud Atlas | ||||||
Cobalt Dickens | COBALT DICKENS | |||||
APT-C-38 (QiAnXin), SABER LION, TG-2884 (SCWX CTU) | COBALT JUNO | |||||
Hive0081 (IBM), SectorD01 (NHSC), xHunt campaign (Palo Alto) | COBALT KATANA | |||||
Nahr Elbard, Nahr el bared | Cold River | |||||
TunisianCyberArmy | Corsair Jackal | |||||
ITSecTeam, Threat Group 2889, TG-2889, Ghambar | Cutting Kitten | |||||
Cyber Berkut | ||||||
Islamic State Hacking Division, CCA, United Cyber Caliphate, UUC, CyberCaliphate | Cyber Caliphate Army | |||||
Fraternal Jackal | Cyber fighters of Izz Ad-Din Al Qassam | |||||
DarkVishnya | ||||||
Dark Basin | ||||||
SyrianElectronicArmy, SEA | Deadeye Jackal | |||||
Dextorous Spider | ||||||
LadyBoyle | Dizzy Panda | |||||
Dungeon Spider | ||||||
Dragonfly 2.0, Dragonfly2, Berserker Bear | DYMALLOY | |||||
Electric Panda | ||||||
Eloquent Panda | ||||||
EvilPost | ||||||
Operation EvilTraffic | EvilTraffic | |||||
FASTCash | ||||||
FIN1 | ||||||
FIN10 | ||||||
TEMP.Warlock | FIN11 | |||||
FIN5 | ||||||
Flash Kitten | ||||||
SaffronRose, Saffron Rose, AjaxSecurityTeam, Ajax Security Team, Group 26, Sayad | Flying Kitten | |||||
Foxy Panda | ||||||
PIONEER KITTEN, PARISITE, UNC757 | Fox Kitten | |||||
Fxmsp | ||||||
Gallmaker | ||||||
Golden Chickens, Golden Chickens01, Golden Chickens 01 | GC01 | |||||
Golden Chickens, Golden Chickens02, Golden Chickens 02 | GC02 | |||||
GCMAN | ||||||
Snooping Dragon | GhostNet | |||||
Ghostwriter | ||||||
Ghost Jackal | ||||||
Gibberish Panda | ||||||
Gnosticplayers | ||||||
GozNym | ||||||
Group5 | ||||||
HAFNIUM | ||||||
Zhenbao, TEMP.Zhenbao | Hammer Panda | |||||
Honeybee | ||||||
HookAds | ||||||
HummingBad | ||||||
Impersonating Panda | ||||||
InvisiMole | ||||||
IRIDIUM | ||||||
DarkUniverse, SIG27 | ItaDuke | |||||
temp.bottle | Keyhole Panda | |||||
Libyan Scorpions | ||||||
Elise | Lotus Panda | |||||
Lucky Cat | ||||||
luoxk | ||||||
COBALT LYCEUM | LYCEUM | |||||
Madi | ||||||
Group 42, VOYEUR | Magic Kitten | |||||
Magnetic Spider | ||||||
Reuse team, Dancing Salome | Malware reusers | |||||
Mana Team | ||||||
PLA Navy, APT4, APT 4, BRONZE EDISON, Sykipot | Maverick Panda | |||||
SixLittleMonkeys | Microcin | |||||
MoneyTaker | ||||||
NEODYMIUM | ||||||
Night Dragon | ||||||
Covert Grove | Nitro | |||||
NOCTURNAL SPIDER | ||||||
Nomad Panda | ||||||
NOTROBIN | ||||||
OnionDog | ||||||
Operation BugDrop | ||||||
Operation Comando | ||||||
Operation Kabar Cobra | ||||||
Operation Parliament | ||||||
Operation Poison Needles | ||||||
Operation Shadow Force | ||||||
Operation Skeleton Key | ||||||
Operation Soft Cell | ||||||
Operation WizardOpium | ||||||
Operation Wocao | ||||||
OurMine | ||||||
Pale Panda | ||||||
PassCV | ||||||
DD4BC, Ambiorx | Pizzo Spider | |||||
Poisonous Panda | ||||||
Predator Panda | ||||||
Shrouded Crossbow | Radio Panda | |||||
LeafMiner, Raspite | RASPITE | |||||
Ratpak Spider | ||||||
FallagaTeam | Rebel Jackal | |||||
RedAlpha | ||||||
RedEcho | ||||||
the Rocra | Red October | |||||
Roaming Mantis Group | Roaming Mantis | |||||
BRONZE WOODLAND, Rotten Tomato | Roaming Tiger | |||||
RTM | ||||||
Sabre Panda | ||||||
SandCat | ||||||
Sands Casino | ||||||
Sath-ı Müdafaa | ||||||
Sea Turtle | ||||||
SectorJ04 | ||||||
Shadow Network | ||||||
Shark Spider | ||||||
RAZOR TIGER, Rattlesnake, APT-C-17, T-APT-04 | SideWinder | |||||
Siesta | ||||||
COBALT DICKENS, Mabna Institute, TA407 | Silent Librarian | |||||
SilverTerrier | ||||||
Sima | ||||||
Singing Spider | ||||||
Slingshot | ||||||
Snake Wine | ||||||
Spicy Panda | ||||||
Stalker Panda | ||||||
STARDUST CHOLLIMA | ||||||
FruityArmor | Stealth Falcon | |||||
Subaat | ||||||
Suckfly | ||||||
SVCMONDR | ||||||
TA459 | ||||||
TA530 | ||||||
Taidoor | ||||||
TeamSpy, Team Bear, Berserk Bear, Anger Bear, IRON LYRIC | TeamSpy Crew | |||||
TeamTNT | ||||||
TEMP.Hermit | ||||||
Xenotime | TEMP.Veles | |||||
TempTick | ||||||
TERBIUM | ||||||
Test Panda | ||||||
The Big Bang | ||||||
The ShadowBrokers, TSB, Shadow Brokers, ShadowBrokers | The Shadow Brokers | |||||
Toxic Panda | ||||||
TRACER KITTEN | ||||||
Turk Hack Team | TurkHackTeam | |||||
Union Panda | ||||||
Union Spider | ||||||
Unnamed Actor | ||||||
ViceLeaker | ||||||
Appin, OperationHangover | Viceroy Tiger | |||||
Vikingdom | Viking Jackal | |||||
Reuse team, Malware reusers, Dancing Salome, Lebanese Cedar | Volatile Cedar | |||||
Wet Panda | ||||||
Whitefly | ||||||
Skipper Turla | White Bear | |||||
FIN4 | Wolf Spider | |||||
XDSpy | ||||||
Yanbian Gang | ||||||
Zombie Spider | ||||||
ZooPark | ||||||
[Unnamed group] | ||||||
[Vault 7/8] | ||||||
Stealth Mango and Tangelo |