Here is a list of the most dangerous Advanced Persistent Threat APT groups.
• APT 1 (also known as Comment Crew or Shanghai Group): This Chinese threat group is believed to be backed by the Chinese military and has been active since 2004. It has been linked to numerous high-profile attacks on government and private organizations, including attacks on the US Office of Personnel Management and Anthem health insurance.
• APT 28 (also known as Fancy Bear): This sophisticated Russian-backed group is believed to be behind a wide range of attacks, including the hack of the Democratic National Committee in 2016.
• APT 29 (also known as Cozy Bear or The Dukes): This Russian-backed group is believed to be behind a number of high-profile attacks, including the hack of the Democratic National Committee in 2016.
• APT 32 (also known as OceanLotus): This highly sophisticated Chinese threat group is believed to be backed by the Chinese government and is believed to be responsible for a number of attacks on government and private organizations.
• APT 33 (also known as Elfin): This Iranian-backed group is believed to be behind a number of cyber espionage campaigns targeting government and private organizations.
• APT 34 (also known as OilRig): This Iranian-backed group is believed to be behind a number of cyber espionage campaigns targeting government and private organizations in the Middle East and in the US.
• APT 37 (also known as Reaper): This North Korean-backed group is believed to be behind a number of cyber espionage campaigns targeting government and private organizations in the US and South Korea.
• APT 38 (also known as Lazarus Group): This North Korean-backed group is believed to be responsible for a number of high-profile cyber attacks, including the WannaCry ransomware attack and the Sony Pictures Entertainment hack.
• APT 39 (also known as Chafer): This Iran-backed group is believed to be behind a number of cyber espionage campaigns targeting government and private organizations in the Middle East.