Inception Framework (Threat Actor)

SYMBOL	COMMON_NAME	aka. SYNONYMS

Inception Framework (Back to overview)

aka: ATK116, Blue Odin, Clean Ursa, Cloud Atlas, G0100, OXYGEN

This threat actor uses spear-phishing techniques to target private-sector energy, defense, aerospace, research, and media organizations and embassies in Africa, Europe, and the Middle East, for the purpose of espionage.

Associated Families

apk.cloudatlas ps1.powershower

References

2022-07-18 ⋅ Palo Alto Networks Unit 42 ⋅ Unit 42
Clean Ursa
PowerShower Inception Framework

2022-07-18 ⋅ Palo Alto Networks Unit 42 ⋅ Unit42
Clean Ursa
PowerShower Inception Framework

2022-04-28 ⋅ PWC ⋅ PWC UK
Cyber Threats 2021: A Year in Retrospect (Annex)
Cobalt Strike Conti PlugX RokRAT Inception Framework Red Menshen

2022-04-28 ⋅ PWC ⋅ PWC UK
Cyber Threats 2021: A Year in Retrospect
BPFDoor APT15 APT31 APT41 APT9 BlackTech BRONZE EDGEWOOD DAGGER PANDA Earth Lusca HAFNIUM HAZY TIGER Inception Framework LOTUS PANDA QUILTED TIGER RedAlpha Red Dev 17 Red Menshen Red Nue VICEROY TIGER

2021-02-28 ⋅ PWC UK ⋅ PWC UK
Cyber Threats 2020: A Year in Retrospect
elf.wellmess FlowerPower PowGoop 8.t Dropper Agent.BTZ Agent Tesla Appleseed Ave Maria Bankshot BazarBackdoor BLINDINGCAN Chinoxy Conti Cotx RAT Crimson RAT DUSTMAN Emotet FriedEx FunnyDream Hakbit Mailto Maze METALJACK Nefilim Oblique RAT Pay2Key PlugX QakBot REvil Ryuk StoneDrill StrongPity SUNBURST SUPERNOVA TrickBot TurlaRPC Turla SilentMoon WastedLocker WellMess Winnti ZeroCleare APT10 APT23 APT27 APT31 APT41 BlackTech BRONZE EDGEWOOD Inception Framework MUSTANG PANDA Red Charon Red Nue Sea Turtle Tonto Team

2020-07-05 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
Red October
Inception Framework

2020-05-08 ⋅ MITRE ⋅ MITRE ATT&CK
Inception
PowerShower LaZagne Inception Framework

2020-05-08 ⋅ MITRE ⋅ MITRE ATT&CK
Inception
PowerShower LaZagne

2019-08-12 ⋅ Kaspersky Labs ⋅ GReAT
Recent Cloud Atlas activity
PowerShower Inception Framework

2019-08-12 ⋅ Kaspersky Labs ⋅ GReAT
Recent Cloud Atlas activity
PowerShower

2019-01-01 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
Inception Framework
Inception Framework

2019-01-01 ⋅ Council on Foreign Relations ⋅ Cyber Operations Tracker
Cloud Atlas
Inception Framework

2018-11-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster
Inception Attackers Target Europe with Year-old Office Vulnerability
PowerShower Inception Framework

2018-11-05 ⋅ Palo Alto Networks Unit 42 ⋅ Tom Lancaster
Inception Attackers Target Europe with Year-old Office Vulnerability
PowerShower

2018-03-14 ⋅ Symantec ⋅ Network Protection Security Labs, Security Response Attack Investigation Team
Inception Framework: Alive and Well, and Hiding Behind Proxies
Inception Framework

2017-10-16 ⋅ Akamai ⋅ Akamei
UPnProxy: Blackhat Proxies via NAT Injections
Inception Framework

2017-09-18 ⋅ Kaspersky Labs ⋅ Alexander Liskin, Andrey Kryukov, Anton Ivanov
An (un)documented Word feature abused by attackers
Inception Framework

2015-01-20 ⋅ Blue Coat ⋅ Basavaraj K. Biradar
Reversing the Inception APT malware
Inception Framework

2015-01-14 ⋅ LogRhythm ⋅ Tony Massé
Catching the “Inception Framework” Phishing Attack
Inception Framework

2014-12-10 ⋅ Kaspersky Labs ⋅ GReAT
Cloud Atlas: RedOctober APT is back in style
Inception Framework

2014-12-09 ⋅ Symantec ⋅ Waylon Grange
Blue Coat Exposes “The Inception Framework”; Very Sophisticated, Layered Malware Attack Targeted at Military, Diplomats, and Bus
Inception Framework

2014-12-09 ⋅ Blue Coat ⋅ Snorre Fagerland, Waylon Grange
The Inception Framework: Cloud-hosted APT
Inception Framework

2014-12-09 ⋅ Blue Coat ⋅ Snorre Fagerland, Waylon Grange
Blue Coat Exposes “The Inception Framework”; Very Sophisticated, Layered Malware Attack Targeted at Military, Diplomats, and Business Execs
CloudAtlas Inception Framework

2013-01-17 ⋅ Kaspersky Labs ⋅ GReAT
“Red October” – Part Two, the Modules
Inception Framework

2013-01-14 ⋅ Kaspersky Labs ⋅ GReAT
“Red October” Diplomatic Cyber Attacks Investigation
Inception Framework

2013-01-14 ⋅ Kaspersky Labs ⋅ GReAT
"Red October" Diplomatic Cyber Attacks Investigation
Inception Framework

2013-01-14 ⋅ Kaspersky Labs ⋅ GReAT
The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies
Inception Framework

Credits: MISP Project