This threat actor uses spear-phishing techniques to target private-sector energy, defense, aerospace, research, and media organizations and embassies ...

Threat Actor Profile

Inception Framework

State-sponsored threat group originating from RU. Suspected sponsor: Russian Federation. Known to target Government, Private sector.

2 Industries Tracked Real-Time Alerts

Actor Overview

Origin Country
RU
Suspected Sponsor
Russian Federation
Incident Types
Espionage

Target Industries

GovernmentPrivate sector

Suspected Victims

AfghanistanArmeniaAzerbaijanBelarusBelgiumCzech RepublicGreeceIndiaIranItalyKazakhstanKenyaMalaysiaRussiaSouth AfricaSurinameTurkmenistanUkraineUnited KingdomUnited StatesVietnam

Related Threat Reports

Premium
APT Campaign Analysis - Q4 2025Dec 2025
New Tactics Observed in WildDec 2025
Infrastructure Mapping ReportDec 2025
Stay Updated

Get alerts when new intel on Inception Framework is published.

Actor Details

Primary Name
Inception Framework
Known Aliases
Clean Ursa, Cloud Atlas, OXYGEN, G0100, ATK116, Blue Odin
Data Source
Precursor Intelligence
Need API Access?

Integrate threat actor data into your SIEM or SOAR.

View Plans →