Cloud Atlas
Nation-state Espionage Russia Dormant
Aliases: Inception · Clean Ursa
- Mentions
- 1
- First seen
- 22 May 2026
- Last seen
- 22 May 2026
Relevant to you · Affects your stack
- Technology:
- Microsoft Active Directory
- Threat focus:
- espionage / apt
Origin
Russia
Profile
Cloud Atlas is a threat actor that was active in the second half of 2025 and early 2026. During this period, it deployed new tools and a new payload. No detailed information about targeted sectors or affected regions is available.
Affected vendors
Microsoft