---
id: 7621
title: "From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion"
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/from-fork-to-framework-what-modifying-apollo-taught-us-about-agent-invasion"
published_at: "2026-09-18T00:00:00Z"
tags: ["red-team", "obfuscation", "c2", "edr", "evasion", "mythic", "apollo"]
phying_url: "https://phying.com/item/7621"
lang: en
---

# From Fork to Framework: What Modifying Apollo Taught Us About Agent Invasion

## Summary

Bishop Fox forked Mythic's Apollo agent and built a custom obfuscator to evade EDR, but Apollo's architecture assumed readable symbol names — obfuscation failed, pushing a from-scratch redesign.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **Published:** 2026-09-18T00:00:00Z
- **Original:** https://bishopfox.com/blog/from-fork-to-framework-what-modifying-apollo-taught-us-about-agent-invasion
- **Phying News:** https://phying.com/item/7621