{
  "id": "inception",
  "name": "Inception",
  "aliases": [
    "Inception Framework",
    "Cloud Atlas"
  ],
  "domain": "cyber",
  "country": "UNK",
  "category": "Unattributed cyber threat group",
  "status": "tracked",
  "fielded": null,
  "operators": [],
  "summary": "Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.",
  "specs": [
    {
      "k": "sponsor",
      "v": "Not attributed by ATT&CK",
      "src": [
        "mitre-g0100"
      ],
      "conf": "low"
    },
    {
      "k": "active_since",
      "v": 2014,
      "src": [
        "mitre-g0100"
      ],
      "conf": "medium",
      "note": "At least 2014"
    },
    {
      "k": "attack_id",
      "v": "G0100",
      "src": [
        "mitre-g0100"
      ],
      "conf": "high"
    },
    {
      "k": "targets",
      "v": "The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.",
      "src": [
        "mitre-g0100"
      ],
      "conf": "medium"
    },
    {
      "k": "techniques_count",
      "v": 22,
      "src": [
        "mitre-g0100"
      ],
      "conf": "high",
      "note": "ATT&CK v20.1"
    },
    {
      "k": "software",
      "v": "LaZagne, PowerShower, VBShower",
      "src": [
        "mitre-g0100"
      ],
      "conf": "high",
      "note": "3 malware and tool entries linked in ATT&CK"
    }
  ],
  "payloads": [],
  "variants": [],
  "art": "cyber",
  "image": null,
  "verified": null,
  "notes": "Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East. Description adapted from MITRE ATT&CK®, © The MITRE Corporation, used under the ATT&CK Terms of Use.",
  "changelog": [
    {
      "date": "2026-11-08",
      "change": "Entry created from MITRE ATT&CK Enterprise v20.1 (group G0100)"
    }
  ],
  "url": "https://www.defensepedia.com/systems/inception.html",
  "sources": {
    "mitre-g0100": {
      "title": "Inception, Group G0100",
      "publisher": "MITRE ATT&CK",
      "url": "https://attack.mitre.org/groups/G0100/",
      "published": "2026-07-31",
      "tier": 2,
      "checked": "2026-11-08"
    }
  }
}