APT / THREAT GROUP
Horus
2
aliases
Last seen:Mar 17, 2026
Intelligence Profile
According to Check Point Research, this is a custom-built agent for Mythic, the open-source red teaming C2 framework. Written in C++, the implant shows no significant overlap with known C-based Mythic agents, aside from commonalities in the generic logic related to Mythic C2 communications.
Threat Analysis
Horus is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.
Intelligence Reports Mentioning Horus
Dragos Acquires xIoT Security Firm Phosphorus
SecurityWeek· Jun 1, 2026
External References
Quick Facts
TypeAPT / Threat Group
Aliases2
Also Known As
win.horusHorus
External Intelligence
Malpedia: win.horusResearch Links
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.