Inception
- ID
- G0100
- Associated names
- Inception Framework, Cloud Atlas
- Source
- attack.mitre.org
- MITRE last modified
- 1 Aug 2026
Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.[1][2][3]
Techniques used (22)
- T1005 Data from Local System
- T1027.013 Encrypted/Encoded File
- T1057 Process Discovery
- T1059.001 PowerShell
- T1059.005 Visual Basic
- T1069.002 Domain Groups
- T1071.001 Web Protocols
- T1082 System Information Discovery
- T1083 File and Directory Discovery
- T1090.003 Multi-hop Proxy
- T1102 Web Service
- T1203 Exploitation for Client Execution
- T1204.002 Malicious File
- T1218.005 Mshta
- T1218.010 Regsvr32
- T1221 Template Injection
- T1518 Software Discovery
- T1547.001 Registry Run Keys / Startup Folder
- T1555.003 Credentials from Web Browsers
- T1566.001 Spearphishing Attachment
- T1573.001 Symmetric Cryptography
- T1588.002 Tool