FlagThis

← All Threat Actors
Threat Actor Profile

Inception

Cloud Atlas G0100 Inception Framework
▲ High Threat
[Inception](https://attack.mitre.org/groups/G0100) is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.(Citation: Unit 42 Inception November 2018)(Citation: Symantec Inception Framework March 2018)(Citation: Kaspersky Cloud Atlas December 2014)
Origin —

Known TTPs

Encrypted/Encoded File
Tool
Registry Run Keys / Startup Folder
Web Service
Multi-hop Proxy
Software Discovery
File and Directory Discovery
Spearphishing Attachment
System Information Discovery
PowerShell
Malicious File
Web Protocols
Data from Local System
Mshta
Credentials from Web Browsers
Exploitation for Client Execution
Domain Groups
Visual Basic
Template Injection
Regsvr32
Symmetric Cryptography
Process Discovery

External Resources

MITRE ATT&CK ↗ CISA Advisories ↗ Mandiant Research ↗ Google Threat Intel ↗

Related Intelligence

Hacking the mainframe…
LINK COPIED TO CLIPBOARD