Horux
Attribution profile
- Type
- Criminal
- Location
- Russia
- Known incidents
- 1 incident
- Sources
- 0 sources
- First seen
- 2015-09-18
- Last seen
- 2015-09-18
- Updated
- 2026-10-12 20:49
- Aliases
- 1 alias
STIX characteristics
Threat actor characteristics are available to members.
Profile narrative
Horux is a hacking group based in Russia that came to public notice after compromising the email server of Kettering General Hospital in the United Kingdom in September 2015. The breach, which began in mid‑August, allowed the actors to use the hospital’s mail system to distribute spam advertising illegal goods on the dark web, showing a financially motivated objective. The reported tactic involved gaining unauthorized access to the email infrastructure; no specific malware families or tooling details were disclosed. Horux has no publicly asserted links to a state sponsor or larger criminal consortium. The Kettering General Hospital incident remains the group’s only publicly documented operation.
Incidents
Attributed incidents are available to members.
1 incidentSources
Sources available to members: 0 sources.