| Andariel | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| Bureau 121 of the Reconnaissance General Bureau | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| ARCHIPELAGO | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| 414 Liaison Office of the Reconnaissance General Bureau | 414 Liaison Office is a subunit of the Reconnaissance General Bureau | - | - | |
| TEMP.Hermit | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| 110th Research Center Export controlled · Sanctioned entity | Lab 110 is subordinate to or synonymous with the 6th Technical Bureau of the North Korean Reconnaissance General Bureau | - | - | |
| Group123 | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| 221 General Bureau of the Reconnaissance General Bureau | The 221 General Bureau is subordinate to the Reconnaissance General Bureau | - | - | |
| Stonefly | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| Konni Group | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| H0lyGh0st | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| Black Banshee | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| 110 Research Institute of the Reconnaissance General Bureau | 110 Research Institute is a subunit of the Reconnaissance General Bureau | - | - | |
| TA444 | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| BeagleBoyz Group | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| Lazarus Group Financial crime · Export controlled · Sanctioned entity | The Reconnaissance General Bureau oversees all North Korean cybercrime activities, Lazarus group included | - | - | |
| 63 Research Center of the Reconnaissance General Bureau | 63 Research Center is a subunit of the Reconnaissance General Bureau | - | - | |
| Bluenoroff Export controlled · Sanctioned entity | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| Office 970 of the Reconnaissance General Bureau | Office 970 is a subunit of the Reconnaissance General Bureau | - | - | |
| Labyrinth Chollima | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |
| Kimsuky Group Export controlled · Sanctioned entity | The Reconnaissance General Bureau oversees all North Korean cybercrime activities, Kimsuky group included | - | - | |
| Reaper Group | The Reconnaissance General Bureau oversees all North Korean cybercrime activities | - | - | |