The table lower in the article gives very searchable "other names", leading to examples: https://attack.mitre.org/groups/G0050/ https://attack.mitre.org/groups

The table lower in the article gives very searchable "other names", leading to examples: https://attack.mitre.org/groups/G0050/ https://attack.mitre.org/groups/G0050/ https://www.cybereason.com/blog/operation-cobalt-kitty-apt https://www.cybereason.com/blog/operation-cobalt-kitty-apt https://en.wikipedia.org/wiki/DarkHotel https://en.wikipedia.org/wiki/DarkHotel