CVE Intelligence
Início / Grupos de ameaça / Inception

Inception G0100

🔔 Criar alerta

Também conhecido como: Inception Framework, Cloud Atlas

Atualizado na fonte em 31/07/2026 · Ver no MITRE ATT&CK

4
CVEs associadas
23
Técnicas
3
Malwares e ferramentas

Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.

Vulnerabilidades exploradas

CVEs citadas pelo MITRE ATT&CK para este grupo, com o trecho da fonte. Fichas ainda não publicadas aqui aparecem sem link.

CVE-2018-0802 Alta · 7.8 KEV Ransomware Microsoft Office Memory Corruption Vulnerability
“Inception has exploited CVE-2012-0158, CVE-2014-1761, CVE-2017-11882 and CVE-2018-0802 for execution.”
CVE-2017-11882 Alta · 7.8 KEV Ransomware Microsoft Office Memory Corruption Vulnerability
“Inception has exploited CVE-2012-0158, CVE-2014-1761, CVE-2017-11882 and CVE-2018-0802 for execution.”
CVE-2014-1761 Alta · 7.8 KEV Microsoft Word Memory Corruption Vulnerability
“Inception has exploited CVE-2012-0158, CVE-2014-1761, CVE-2017-11882 and CVE-2018-0802 for execution.”
CVE-2012-0158 Alta · 8.8 KEV Ransomware Microsoft MSCOMCTL.OCX Remote Code Execution Vulnerability
“Inception has exploited CVE-2012-0158, CVE-2014-1761, CVE-2017-11882 and CVE-2018-0802 for execution.”

Técnicas por tática

Desenvolvimento de recursos
T1588.002 Tool
Acesso inicial
T1566.001 Spearphishing Attachment
Execução
T1059.001 PowerShellT1059.005 Visual BasicT1203 Exploitation for Client ExecutionT1204.002 Malicious File
Persistência
T1547.001 Registry Run Keys / Startup Folder
Escalada de privilégios
T1547.001 Registry Run Keys / Startup Folder
Furtividade
T1027.013 Encrypted/Encoded FileT1218.005 MshtaT1218.010 Regsvr32T1221 Template Injection
Acesso a credenciais
T1555.003 Credentials from Web Browsers
Descoberta
T1057 Process DiscoveryT1069.002 Domain GroupsT1082 System Information DiscoveryT1083 File and Directory DiscoveryT1518 Software Discovery
Coleta
T1005 Data from Local System
Comando e controle
T1071.001 Web ProtocolsT1090.003 Multi-hop ProxyT1102 Web ServiceT1573.001 Symmetric Cryptography

Malwares e ferramentas

© The MITRE Corporation. Conteúdo do ATT&CK® reproduzido e distribuído com permissão da MITRE Corporation. Descrições em inglês, como na fonte.