Threat actor · MITRE ATT&CK G0100
Cloud Atlas
Russia · espionage · also tracked as Inception Framework, ATK116, Blue Odin
Tracked by CyberSIXT since 19 Dec · RSS
2Articles, all time
0Articles, last 30 days
0CVEs exploited, attributed · all time
0Research reports, all time
Activity
Quiet for 25 weekslast report 22 May2 articles1 outlet
Two articles so far, 19 Dec 2025 to 22 May.
- Fri 22 May. Securelist. Cloud Atlas APT targets Russia, Belarus with phishing attacks.
- Fri 19 Dec. Securelist. Cloud Atlas activity in the first half of 2025: what changed.
- Article naming Cloud Atlas
- Articles a day, all coverage
- Quiet time, folded
Drawn: all 2 articles.
Show as tableHide table
| Date | Type | Source | Title |
|---|---|---|---|
| 22 May | Article | Securelist | Cloud Atlas APT targets Russia, Belarus with phishing attacks |
| 19 Dec | Article | Securelist | Cloud Atlas activity in the first half of 2025: what changed |
Connections
5 tools. What the record links this actor to; hover or use the arrow keys.
Show as a listHide the list
- Malware and tools
- LaZagne, PowerShower, VBShower, CloudAtlas
CVEs exploited
No CVE is attributed to Cloud Atlas in CyberSIXT coverage.
MITRE ATT&CK techniques22 techniques · 10 tactics
Distinct techniques recorded per ATT&CK tactic. The shape shows what the record covers, not activity or risk.
Compare withAverage of 48 actors
Show as tableHide table
| Tactic | Cloud Atlas | Average of 48 actors |
|---|---|---|
| Reconnaissance | 0 | 2.2 |
| Resource Development | 1 | 4.9 |
| Initial Access | 1 | 3.3 |
| Execution | 4 | 5.7 |
| Persistence | 1 | 4.4 |
| Privilege Escalation | 1 | 3.7 |
| Stealth | 4 | 7.9 |
| Defense Impairment | 0 | 1.5 |
| Credential Access | 1 | 3.1 |
| Discovery | 5 | 5.9 |
| Lateral Movement | 0 | 1.5 |
| Collection | 1 | 3.1 |
| Command and Control | 4 | 4 |
| Exfiltration | 0 | 0.9 |
| Impact | 0 | 1.1 |
Most recorded: Discovery 5 · Execution 4 · Stealth 4
Show the technique matrixTechnique matrix23 techniques
Resource Development1
Initial Access1
Execution4
Persistence1
Privilege Escalation1
Stealth4
Credential Access1
Discovery5
Collection1
Command and Control4
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. All techniques on MITRE ATT&CK
Malware and tools5
MITRE ATT&CK® · G0100 and Malpedia · inception_framework
MITRE ATT&CK® · G0100
Malpedia · inception_framework
Articles2
Drawn: all 2 articles.