Strider
Also reported as ProjectSauron, Sauron and Project Sauron. Linked to United States by three sources.
Reports per quarter
Techniques in ATT&CK
Listed by ATT&CK
No report from the last two years names a technique ID.
CVEs named in reports
- CVE-2006-3439
- CVE-2007-5633
- CVE-2008-3431 KEV
- CVE-2008-4250 KEV
- CVE-2009-0824
- CVE-2010-1592
- CVE-2010-2568 KEV
- CVE-2010-2729
- CVE-2010-2743
- CVE-2010-2772
- CVE-2010-3338
- CVE-2012-0158 KEV ransomware
Show all 35 CVEs Show fewer
- CVE-2012-3015
- CVE-2014-4148 KEV
- CVE-2015-0096
- CVE-2015-2545 KEV
- CVE-2016-0165 KEV
- CVE-2016-1010 KEV
- CVE-2016-3393 KEV
- CVE-2016-4117 KEV ransomware
- CVE-2016-4171 KEV
- CVE-2017-0144 KEV ransomware
- CVE-2017-0199 KEV ransomware
- CVE-2017-11882 KEV ransomware
- CVE-2017-8464 KEV
- CVE-2017-8570 KEV
- CVE-2018-0802 KEV ransomware
- CVE-2018-8345
- CVE-2018-8346
- CVE-2019-1188
- CVE-2019-1280
- CVE-2020-0684
- CVE-2020-0729
- CVE-2020-1299
- CVE-2020-1421
KEV marks a CVE in CISA's Known Exploited Vulnerabilities Catalog, and “ransomware” marks one that the catalog records as used in ransomware campaigns.
Reports
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor eset_jumping_the_air_gap_wp
-
AcidBox- Rare Malware Repurposing Turla Group Exploit Targeted Russian Organizations
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor AcidBox- Rare Malware Repurposing Turla Group Exploit Targeted Russian Organizations
-
AcidBox_ Rare Malware Repurposing Turla Group Exploit Targeted Russian Organizations
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor AcidBox_ Rare Malware Repurposing Turla Group Exploit Targeted Russian Organizations
Show all 36 reports Show fewer
-
Microsoft Word - The Slingshot APT_report_ENG_final.docx
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Microsoft Word - The Slingshot APT_report_ENG_final.docx
-
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor The Slingshot APT FAQ
-
Unraveling the Lamberts Toolkit
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Unraveling the Lamberts Toolkit
-
Unraveling the Lamberts Toolkit
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Unraveling the Lamberts Toolkit
-
Strider: Cyberespionage group turns eye of Sauron on targets | Symantec Connect Community
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Strider: Cyberespionage group turns eye of Sauron on targets | Symantec Connect Community
-
Strider- Cyberespionage group turns eye of Sauron on targets
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Strider- Cyberespionage group turns eye of Sauron on targets
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor ProjectSauron_ top level cyber-espionage platform covertly extracts encrypted government comms - Securelist
-
The-ProjectSauron-APT_Technical_Analysis_KL
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The-ProjectSauron-APT_Technical_Analysis_KL
-
ProjectSauron- top level cyber-espionage platform covertly extracts encrypted government comms
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor ProjectSauron- top level cyber-espionage platform covertly extracts encrypted government comms
-
The-ProjectSauron-APT_research_KL
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The-ProjectSauron-APT_research_KL
-
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor The-ProjectSauron-APT_IOCs_KL
-
Strider: Cyberespionage group turns eye of Sauron on targets
The link to Mirror on Box failed its last check. Mirror on Box Detailsfor Strider: Cyberespionage group turns eye of Sauron on targets
-
Security Response Custom Report
The title opens CyberMonitor archive on GitHub, not the publisher’s page. Archived copy on ORKL Detailsfor Security Response Custom Report
-
Strider- Cyberespionage group turns eye of Sauron on targets
The title opens Mirror on VX-Underground, not the publisher’s page. Archived copy on ORKL Detailsfor Strider- Cyberespionage group turns eye of Sauron on targets
Newest first. Details opens the report in Explore.