Inception Framework, also widely tracked as Cloud Atlas and G0100, is a Russian-speaking cyber espionage group that first emerged in 2014. The group's primary motivation is intelligence collection, focusing on obtaining diplomatic communications, classified government documents, strategic lines of effort, and sensitive research from defense and energy sectors. Their operational model has evolved significantly, initially employing encrypted document droppers and cloud-based payloads, and later expanding to include sophisticated spear-phishing, cloud command-and-control (C2) infrastructure, OAuth hijacking for account access, and enhanced modular backdoors. A distinguishing characteristic of Inception Framework is its consistent maintenance of high operational security (OPSEC), enabling it to pivot rapidly in response to technological changes and evade detection. Their campaign design is noted for disciplined spear-phishing, malware staged on cloud services, and a multi-layered C2 archit

Aliases del actor

ATK116Blue OdinClean UrsaCloud AtlasG0100OXYGENRed October

Actores similares

inception-frameworkactor · 1apt-redoctoberactor · 1Red Octoberapt · 0blueskythreat-actor · 3Scattered Spiderthreat-actor · 2redactactor · 2blueboxthreat-actor · 2bluelockerthreat-actor · 2redalertthreat-actor · 2redransomwarethreat-actor · 2