Threat Actor Groups Tracked by Palo Alto Networks Unit 42 (Updated Aug. 1, 2025)

Unit 42 provides an indexed catalog of notable threat actors using its constellation-based designators, covering nation-state APTs and financially motivated cybercriminal and ransomware groups. Each entry includes aliases, a short summary of attribution and activity, sectors previously impacted, and observed tactics, techniques and procedures; the document aggregates ongoing threats such as major nation-state espionage groups and high-impact ransomware operations and includes update history.