Opening Forensia workspaceacquiring
Loading the current evidence view. Navigation and account controls remain available.
Loading recent evidenceacquiring
Threat actors
Loading the current evidence view. Navigation and account controls remain available.
Also known as: Inception Framework, Cloud Atlas
22
techniques
3
software
11,641
corpus matches
profile
Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.
techniques
22 attributed · most-instrumented first
software
3 malware & tools attributed
LaZagne
S0349
PowerShower
S0441
VBShower
S0442
read this carefully
11,641 corpus matches is not attribution
That count is indicators which exhibit techniques Inception is known to use. Many unrelated operators use the same techniques. Treat it as a shared-technique signal for hunting, never as first-party attribution to this group.
indicators exhibiting these techniques
Top by severity: each resolves to its own verdict.
+10 more techniques
showing 30 of 11,641
known aliases
Vendors name the same group differently. Searching any alias reaches this profile.