Inception
Inception is a cyber espionage group active since at least 2014. The group has targeted multiple industries and governmental entities primarily in Russia, but has also been active in the United States and throughout Europe, Asia, Africa, and the Middle East.
Attribution signal
?Score = mentions × confidence weight, summed across all attributed sources. Higher source diversity increases the score.≥ 10 High≥ 3 Moderate< 3 Low3.0
Low signal strength
Mentions4
Sources3
High conf.4
Last seenMay 2026
First observed
2020-05-08
Last active
—
Origin
Russia
Aliases
3
Techniques
22
Campaigns
0
Russia
Attribution signals
4 mentions · 3 sources#1high
MalwareTTP match
solar4rays
May 2026
Campaign: Cloud Atlas Phishing Campaign
#2remains consistent inhigh
TTP match
securelist
May 2026
"Cloud Atlas remains consistent in using phishing."
#3employedhigh
TTP match
wiz-research
May 2026
"Atlas Lion employed adversary-in-the-middle proxies and smishing to bypass MFA."
#4ishigh
TTP matchMalware
securelist
May 2026
"Behind some of this activity is Cloud Atlas, a group we have known since 2014."
Hedge terms observed
employedisremains consistent in