Home / Early Warning / Cybersecurity Highlights / Sauron, an APT that spies ciphered communication

Sauron, an APT that spies ciphered communication

08/07/2016

A APT active since October 2011, named ProjectSauron, has been recently discovered. This APT, which advanced design seems related to a national intelligence agency, has affected specific organizations in Belgium, Sweden, Russia and China. ProjectSauron uses a variation of Remsec to stablish a backdoor and, later, gain access to cyphered communication, installs a keylogger and sends files out.