| turla | ATK13, Blue Python, G0010, Group 88, Hippo Team, IRON HUNTER, ITG12, KRYPTON, MAKERSMARK, Pacifier APT, Pfinet, Popeye, SIG23, SUMMIT, Secret Blizzard, Snake, TAG_0530, UNC4210, Uroburos, VENOMOUS Bear, WRAITH, Waterbug |
| apt28 | APT 28, APT-C-20, ATK5, Blue Athena, FANCY BEAR, FROZENLAKE, Fighting Ursa, Forest Blizzard, G0007, Grey-Cloud, Grizzly Steppe, Group 74, Group-4127, IRON TWILIGHT, ITG05, Pawn Storm, SIG40, SNAKEMACKEREL, STRONTIUM, Sednit, Sofacy, Swallowtail, T-APT-12, TA422, TG-4127, Tsar Team, TsarTeam, UAC-0028 |
| apt29 | ATK7, Blue Kitsune, BlueBravo, COZY BEAR, Cloaked Ursa, G0016, Grizzly Steppe, Group 100, IRON HEMLOCK, ITG11, Midnight Blizzard, Minidionis, NOBELIUM, SeaDuke, TA421, The Dukes, YTTRIUM |
| sandworm | Blue Echidna, ELECTRUM, FROZENBARENTS, G0034, IRIDIUM, IRON VIKING, Quedagh, Seashell Blizzard, TEMP.Noble, TeleBots, VOODOO BEAR |
| ta505 | ATK103, CHIMBORAZO, DEV-0950, Dudear, FIN11, G0092, GOLD TAHOE, GRACEFUL SPIDER, Hive0065, Lace Tempest, SectorJ04, SectorJ04 Group, Spandex Tempest |
| fin7 | ATK32, CARBON SPIDER, Calcium, Carbanak, Coreid, ELBRUS, G0008, G0046, GOLD NIAGARA, Sangria Tempest |
| unc2452 | APT29, Cozy Bear, DarkHalo, Midnight Blizzard, NOBELIUM, Solar Phoenix, StellarParticle |
| wizard_spider | DEV-0193, DEV-0237, FIN12, GOLD BLACKBURN, Periwinkle Tempest, Pistachio Tempest, TEMP.MixMaster, UNC2053 |
| inception_framework | ATK116, Blue Odin, Clean Ursa, Cloud Atlas, G0100, OXYGEN |
| indrik_spider | DEV-0243, EvilCorp, Manatee Tempest, UNC2165 |
| buhtrap | No alias |
| boulder_bear | No alias |
| callisto | BlueCharlie, COLDRIVER, GOSSAMER BEAR, Reuse Team, SEABORGIUM, Star Blizzard, TA446 |
| chernovite | No alias |
| circus_spider | No alias |
| cyber_berkut | No alias |
| dustsquad | Nomadic Octopus |
| energetic_bear | ALLANITE, ATK6, BERSERK BEAR, BROMINE, Blue Kraken, CASTLE, Crouching Yeti, DYMALLOY, Dragonfly, G0035, Ghost Blizzard, Group 24, Havex, IRON LIBERTY, ITG15, Koala Team, TG-4192 |
| fin1 | No alias |
| fin13 | Elephant Beetle, TG2003 |
| gcman | G0036 |
| hiddenart | No alias |
| magnetic_spider | No alias |
| oldgremlin | No alias |
| operation_bugdrop | No alias |
| romcom | Storm-0978 |
| shark_spider | No alias |
| ta570 | DEV-0450 |
| ta577 | Hive0118 |
| teamspy_crew | Anger Bear, IRON LYRIC, Team Bear, TeamSpy |
| uac-0094 | No alias |
| union_spider | No alias |
| usersec | No alias |
| white_bear | Skipper Turla |
| xaknet | No alias |
| zarya | No alias |
