Strider · APTtrail

On this page

Attribution

Suspected origin

US
United States

Activity

Espionage

Targeted sectors

Suspected victims

Belgium
China
Iran
Russia
Rwanda
Sweden

Upstream trail

Take the data

# everything, with sources
curl -sL https://trilwu.github.io/apttrail/by-group/G0041.json

# domains, one per line
curl -sL https://trilwu.github.io/apttrail/by-group/G0041-domain.txt

G0041.json · G0041-domain.txt

Overview 5 indicators

Strider is a threat group that has been active since at least 2011 and has targeted victims in Russia, China, Sweden, Belgium, Iran, and Rwanda.

domain

5

G0041-domain.txt

Techniques 3 ATT&CK

Open in ATT&CK Navigator → or download the layer (3 techniques, layer 4.5)

Software 1

Remsec

Principal sources 1 reports

Ranked by how many of this actor's indicators each report brought in.

5securelist.com/files/2016/07/The-ProjectSauron-APT_IOC…

Timeline 5 indicators

Each entry is a batch of indicators that appeared upstream on one date, under the report it was filed with.

2017-04-13 5 domain9 yrs ago

securelist.com/files/2016/07/The-ProjectSauron-APT_IOC…

bikessport.com

flowershop22.110mb.com

myhomemusic.com

rapidcomments.com

wildhorses.awardspace.info

Further reading 5