Strider — APT Profile
ProjectSauron (a.k.a. Strider) is a top-level modular cyber-espionage platform active since at least 2011, designed for long-term stealthy campaigns with per-victim customized implants (Remsec) and multiple exfiltration methods, including air-gap crossing via USB. It targets a small set of high-value government, defense, telecom, and research entities, with known victims in Russia, China, Sweden, Belgium, Iran, and Rwanda. Tooling and tradecraft show overlap with Equation Group, and all artifacts are customized per victim to minimize cross-victim indicators of compromise.Also tracked as
ProjectSauron
Tools & malware
- Remsec Backdoor
- win.remsec_strider Backdoor