Horus
- First seen
- 2023-01-01 00:00:00
- Malware type
- rat
- Profile updated
- 2026-07-07 15:05:53
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
According to Check Point Research, this is a custom-built agent for Mythic, the open-source red teaming C2 framework. Written in C++, the implant shows no significant overlap with known C-based Mythic agents, aside from commonalities in the generic logic related to Mythic C2 communications.
Detection coverage
- 1 YARA rules
Detection rules
- MALPEDIA_Win_Horus_Auto (yara-rule)
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Horus (report)
- research.checkpoint.com — Stealth Falcon Zero Day (report)