Those are not really apt designations except the equation group. The sanctioned ngo cyber actors are groups like finfisher, nso, the greek one that was just sanctioned, the remnants of Hacking Team. Alongside DIB companies like Raytheon, LockMart, etc. it's all rather aboveboard.
