Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 16:27:59 UTC
Home > List all groups > List all tools > List all groups using tool Hodur
 Tool: Hodur
Names Hodur
Category Malware
Type Backdoor
Description
(ESET) ESET researchers discovered a still-ongoing campaign using a previously
undocumented Korplug (PlugX) variant, which they named Hodur due to its resemblance to
the THOR variant previously documented by Unit 42 in 2020. In Norse mythology, Hodur is
Thor’s blind half-brother, who is tricked by Loki into killing their half-brother Baldr.
Information
Malpedia Last change to this tool card: 27 December 2024
Download this tool card in JSON format
All groups using tool Hodur
Changed Name Country Observed
APT groups
 Mustang Panda, Bronze President 2012-Jun 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bfb0c836-4874-4278-bf1c-a15f0e50bf26
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=bfb0c836-4874-4278-bf1c-a15f0e50bf26
Page 1 of 1