HOMETHREATSOderoor
APT / THREAT GROUP

Oderoor

4
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Spam bot that was active around 2007 and after, one of the first malware families to use a domain generation algorithm.

Threat Analysis

Oderoor is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://bin.re/blog/krakens-two-domain-generation-algorithms/
→https://web.archive.org/web/20160324035554/https://www.johannesbader.ch/2015/12/krakens-two-domain-generation-algorithms//
→https://web.archive.org/web/20160616170611/https://media.blackhat.com/bh-eu-10/presentations/Carrera_Silberman/BlackHat-EU-2010-Carrera-Silberman-State-of-Malware-slides.pdf

Quick Facts

TypeAPT / Threat Group
Aliases4

Also Known As

BobaxOderoorKrakenwin.oderoor

External Intelligence

Malpedia: win.oderoor

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Oderoor