Threat Actor
Strider
Also known as: Strider, ProjectSauron
Strider is a threat group that has been active since at least 2011 and has targeted victims in Russia, China, Sweden, Belgium, Iran, and Rwanda.
3
Techniques
1
Software
0
indicators on this record
Properties
- Last source
- MITRE ATT&CK
- STIX ID
- intrusion-set--277d2f87-2ae5-4730-a3aa-50c1fdff9656
- In Signal since
- initial import (Sep 2026)
- Retrieved at
- 2026-11-01T20:39:43+00:00
- Type
- intrusion-set
MITRE ATT&CK Techniques (3)
▸
Hidden File System (T1564.005)
Adversaries may use a hidden file system to conceal malicious activity from users and security tools. File systems provide a structure to store and ac
▸
Internal Proxy (T1090.001)
Adversaries may use an internal proxy to direct command and control traffic between two or more systems in a compromised environment. Many tools exist
▸
Password Filter DLL (T1556.002)
Adversaries may register malicious password filter dynamic link libraries (DLLs) into the authentication process to acquire user credentials as they a
Software & Tools (1)
▸
Remsec [malware]
Remsec is a modular backdoor that has been used by Strider and app
Explore this actor's full graph with Ninja Signal