| SYMBOL | COMMON_NAME | aka. SYNONYMS |
This threat actor uses spear-phishing techniques to target private-sector energy, defense, aerospace, research, and media organizations and embassies in Africa, Europe, and the Middle East, for the purpose of espionage.
| 2022-07-18 ⋅ Palo Alto Networks Unit 42 ⋅ Clean Ursa PowerShower Inception Framework |
| 2022-07-18 ⋅ Palo Alto Networks Unit 42 ⋅ Clean Ursa PowerShower Inception Framework |
| 2022-04-28 ⋅ PWC ⋅ Cyber Threats 2021: A Year in Retrospect APT15 APT31 APT41 APT9 BlackTech BRONZE EDGEWOOD DAGGER PANDA Earth Lusca HAFNIUM HAZY TIGER Inception Framework LOTUS PANDA QUILTED TIGER RedAlpha Red Dev 17 Red Menshen Red Nue VICEROY TIGER |
| 2022-04-28 ⋅ PWC ⋅ Cyber Threats 2021: A Year in Retrospect (Annex) Cobalt Strike Conti PlugX RokRAT Inception Framework Red Menshen |
| 2021-02-28 ⋅ PWC UK ⋅ Cyber Threats 2020: A Year in Retrospect elf.wellmess FlowerPower PowGoop 8.t Dropper Agent.BTZ Agent Tesla Appleseed Ave Maria Bankshot BazarBackdoor BLINDINGCAN Chinoxy Conti Cotx RAT Crimson RAT DUSTMAN Emotet FriedEx FunnyDream Hakbit Mailto Maze METALJACK Nefilim Oblique RAT Pay2Key PlugX QakBot REvil Ryuk StoneDrill StrongPity SUNBURST SUPERNOVA TrickBot TurlaRPC Turla SilentMoon WastedLocker WellMess Winnti ZeroCleare APT10 APT23 APT27 APT31 APT41 BlackTech BRONZE EDGEWOOD Inception Framework MUSTANG PANDA Red Charon Red Nue Tonto Team |
| 2020-07-05 ⋅ Council on Foreign Relations ⋅ Red October Inception Framework |
| 2020-05-08 ⋅ MITRE ⋅ Inception PowerShower LaZagne Inception Framework |
| 2020-05-08 ⋅ MITRE ⋅ Inception PowerShower LaZagne |
| 2019-08-12 ⋅ Kaspersky Labs ⋅ Recent Cloud Atlas activity PowerShower |
| 2019-08-12 ⋅ Kaspersky Labs ⋅ Recent Cloud Atlas activity PowerShower Inception Framework |
| 2019 ⋅ Council on Foreign Relations ⋅ Inception Framework Inception Framework |
| 2019 ⋅ Council on Foreign Relations ⋅ Cloud Atlas Inception Framework |
| 2018-11-05 ⋅ Palo Alto Networks Unit 42 ⋅ Inception Attackers Target Europe with Year-old Office Vulnerability PowerShower Inception Framework |
| 2018-11-05 ⋅ Palo Alto Networks Unit 42 ⋅ Inception Attackers Target Europe with Year-old Office Vulnerability PowerShower |
| 2018-03-14 ⋅ Symantec ⋅ Inception Framework: Alive and Well, and Hiding Behind Proxies Inception Framework |
| 2017-10-16 ⋅ Akamai ⋅ UPnProxy: Blackhat Proxies via NAT Injections Inception Framework |
| 2017-09-18 ⋅ Kaspersky Labs ⋅ An (un)documented Word feature abused by attackers Inception Framework |
| 2015-01-20 ⋅ Blue Coat ⋅ Reversing the Inception APT malware Inception Framework |
| 2015-01-14 ⋅ LogRhythm ⋅ Catching the “Inception Framework” Phishing Attack Inception Framework |
| 2015-01-14 ⋅ LogRhythm ⋅ Catching the “Inception Framework” Phishing Attack Inception Framework |
| 2014-12-10 ⋅ Kaspersky Labs ⋅ Cloud Atlas: RedOctober APT is back in style Inception Framework |
| 2014-12-10 ⋅ Kaspersky Labs ⋅ Cloud Atlas: RedOctober APT is back in style Inception Framework |
| 2014-12-09 ⋅ Blue Coat ⋅ Blue Coat Exposes “The Inception Framework”; Very Sophisticated, Layered Malware Attack Targeted at Military, Diplomats, and Business Execs CloudAtlas Inception Framework |
| 2014-12-09 ⋅ Symantec ⋅ Blue Coat Exposes “The Inception Framework”; Very Sophisticated, Layered Malware Attack Targeted at Military, Diplomats, and Bus Inception Framework |
| 2014-12-09 ⋅ Blue Coat ⋅ The Inception Framework: Cloud-hosted APT Inception Framework |
| 2013-01-17 ⋅ Kaspersky Labs ⋅ “Red October” – Part Two, the Modules Inception Framework |
| 2013-01-14 ⋅ Kaspersky Labs ⋅ "Red October" Diplomatic Cyber Attacks Investigation Inception Framework |
| 2013-01-14 ⋅ Kaspersky Labs ⋅ The “Red October” Campaign – An Advanced Cyber Espionage Network Targeting Diplomatic and Government Agencies Inception Framework |
| 2013-01-14 ⋅ Kaspersky Labs ⋅ “Red October” Diplomatic Cyber Attacks Investigation Inception Framework |