Inception

OriginRússia

Techniques (MITRE ATT&CK)22

SourceMITRE ATT&CK

Also known as:Inception FrameworkCloud Atlas

Vexday analysis

Grupo de espionagem cibernética de origem russa, ativo pelo menos desde 2014, rastreado pelo MITRE ATT&CK como G0100 e também referenciado pelos nomes Inception Framework e Cloud Atlas. Suas operações têm como alvo principal entidades governamentais e múltiplos setores industriais na Rússia, com atividade documentada também nos Estados Unidos, Europa, Ásia, África e Oriente Médio. O grupo possui 22 técnicas mapeadas na base ATT&CK e é associado à exploração de 4 CVEs.

Techniques (MITRE ATT&CK) 22

How the group operates, mapped to the MITRE ATT&CK matrix and organized by the phases of an attack.

Resource development

Tool

Initial access

Spearphishing Attachment

Execution

PowerShell Visual Basic Exploitation for Client Execution Malicious File

Persistence

Registry Run Keys / Startup Folder

Credential access

Credentials from Web Browsers

Discovery

Process Discovery Domain Groups System Information Discovery File and Directory Discovery Software Discovery

Collection

Data from Local System

Command and control

Web Protocols Multi-hop Proxy Web Service Symmetric Cryptography

stealth

Encrypted/Encoded File Mshta Regsvr32 Template Injection

Exploited vulnerabilities 4

CVEs this group is known to exploit, per MITRE ATT&CK. Ordered by real-world severity.

CVE-2012-0158HIGHEPSS 100%KEV CVE-2017-11882HIGHEPSS 100%KEV CVE-2018-0802HIGHEPSS 93%KEV CVE-2014-1761HIGHEPSS 78%KEV

Inception uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →