MITRE ATT&CKgroup

G0100 Inception

Published 2020-05-08 Modified 2026-07-31 Official page ↗
Domain
enterprise
Aliases
Inception Framework, Cloud Atlas
Version
1.2
Created
2020-05-08

Description

Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.

Related

Uses · MITRE ATT&CK (25)

  • T1027.013 Encrypted/Encoded File sub-technique
  • T1588.002 Tool sub-technique
  • S0441 PowerShower software (malware)
  • S0442 VBShower software (malware)
  • T1573.001 Symmetric Cryptography sub-technique
  • T1071.001 Web Protocols sub-technique
  • T1090.003 Multi-hop Proxy sub-technique
  • T1204.002 Malicious File sub-technique
  • T1059.001 PowerShell sub-technique
  • T1059.005 Visual Basic sub-technique
  • T1566.001 Spearphishing Attachment sub-technique
  • T1069.002 Domain Groups sub-technique
  • T1555.003 Credentials from Web Browsers sub-technique
  • T1218.005 Mshta sub-technique
  • T1218.010 Regsvr32 sub-technique
  • T1547.001 Registry Run Keys / Startup Folder sub-technique
  • T1518 Software Discovery technique
  • S0349 LaZagne software (tool)
  • T1221 Template Injection technique
  • T1203 Exploitation for Client Execution technique
  • T1005 Data from Local System technique
  • T1057 Process Discovery technique
  • T1082 System Information Discovery technique
  • T1083 File and Directory Discovery technique
  • T1102 Web Service technique

References