Threat actor · all actors
InceptionG0100 state
🇷🇺 RU
aka Inception, Inception Framework, Cloud Atlas, Clean Ursa, OXYGEN, G0100, ATK116, Blue Odin
Last updated: 2026-07-03
0attributed CVEs
34ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
[Inception](https://attack.mitre.org/groups/G0100) is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.(Citation: Unit 42 Inception November 2018)(Citation: Symantec Inception Framework March 2018)(Citation: Kaspersky Cloud Atlas December 2014)
Source: MITRE ATT&CK
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
Mitigating controls (NIST 800-53)
| Control | Techniques covered | Coverage |
|---|---|---|
SI-4 | 21 / 34 | 62% |
SI-3 | 20 / 34 | 59% |
CA-7 | 18 / 34 | 53% |
CM-6 | 18 / 34 | 53% |
CM-2 | 17 / 34 | 50% |
CM-7 | 15 / 34 | 44% |
SC-7 | 14 / 34 | 41% |
AC-4 | 13 / 34 | 38% |
SI-10 | 11 / 34 | 32% |
SI-7 | 11 / 34 | 32% |
SI-2 | 10 / 34 | 29% |
AC-3 | 9 / 34 | 26% |
AC-6 | 7 / 34 | 21% |
CM-8 | 7 / 34 | 21% |
RA-5 | 7 / 34 | 21% |
Co-occurring actors
None.
Similar actors
Similar TTPs
- Frankenstein 0.38
- Sidewinder 0.36
- Confucius 0.35
- APT19 0.35
- APT33 0.33
Same nation-state
Same category
- Night Dragon 1.00
- FunnyDream 1.00
- C0011 1.00
- Operation Wocao 1.00
- Operation Dream Job 1.00