Introduction
Strider is a threat group that has been active since at least 2011 and has targeted victims in Russia, China, Sweden, Belgium, Iran, and Rwanda. Symantec Strider Blog Kaspersky ProjectSauron Blog
Activities and Tactics
Targeted Sectors: Intelligence, Government, Military
Country of Origin: 🇺🇸 United States
Incident Type: Espionage
Suspected Victims: Russia, Iran, Belgium, China, Sweden, Rwanda
Notable Campaigns
Information pending cataloguing.
Tactics, Techniques, and Procedures (TTPs)
ATT&CK technique IDs (denormalized)
Notable Indicators of Compromise (IOCs)
No curated IOCs are currently published for this actor. This section will be updated when stable, attributable indicators are available.
Malware and Tools
MITRE ATT&CK Software
Attribution and Evidence
Country of Origin: United States Additional attribution information pending cataloguing.
References
[1] mitre-attack [4] Symantec Strider Blog Symantec Security Response. (2016, August 7). Strider: Cyberespionage group turns eye of Sauron on targets. Retrieved August 17, 2016. [5] Kaspersky ProjectSauron Blog Kaspersky Lab’s Global Research & Analysis Team. (2016, August 8). ProjectSauron: top level cyber-espionage platform covertly extracts encrypted government comms. Retrieved August 17, 2016. [6] Kaspersky ProjectSauron Full Report Kaspersky Lab’s Global Research & Analysis Team. (2016, August 9). The ProjectSauron APT. Retrieved August 17, 2016.