Jump to content

X-Agent: Difference between revisions

From Wikipedia, the free encyclopedia
Content deleted Content added
AgevtX11 (talk | contribs)
No edit summary
m Reverted 3 edits by AgevtX11 (talk) to last revision by 197.32.57.225. (TW)
Line 8: Line 8:
| IsolationDate =
| IsolationDate =
| Origin =
| Origin =
| Author = [[Fancy Bear]] & [[The Hacker Agent X|Agent X]]<ref name="CrowdStrike">{{cite web|url=https://www.crowdstrike.com/blog/danger-close-fancy-bear-tracking-ukrainian-field-artillery-units/|title=Danger Close: Fancy Bear Tracking of Ukrainian Field Artillery Units|date=22 December 2016|publisher=CrowdStrike|quote=CrowdStrike associates the use of X-Agent with an actor we call FANCY BEAR. This actor to date is the exclusive operator of the malware}}</ref>
| Author = [[Fancy Bear]]<ref name="CrowdStrike">{{cite web|url=https://www.crowdstrike.com/blog/danger-close-fancy-bear-tracking-ukrainian-field-artillery-units/|title=Danger Close: Fancy Bear Tracking of Ukrainian Field Artillery Units|date=22 December 2016|publisher=CrowdStrike|quote=CrowdStrike associates the use of X-Agent with an actor we call FANCY BEAR. This actor to date is the exclusive operator of the malware}}</ref>
| Ports used =
| Ports used =
| OSes = [[iOS]], [[Android (operating system)|Android]]
| OSes = [[iOS]], [[Android (operating system)|Android]]

Revision as of 23:15, 12 June 2017

X-Agent
TypeSpyware
AuthorsFancy Bear[1]
Technical details
PlatformiOS, Android

X-Agent or XAgent is a malware program designed to collect and transmit hacked files from iPhones to servers operated by hackers. It employs phishing attacks and the program is designed to "hop" from device to device.[2][3][4] In 2016, CrowdStrike identified an Android variant of the malware for the first time, and claimed that the malware targeted members of the Ukrainian military by distributing an infected version of an app to control D-30 Howitzer artillery.[1] The Ukrainian army denied CrowdStrike's report and stated that losses of Howitzer artillery pieces had "nothing to do with the stated cause".[5]

References

  1. ^ a b "Danger Close: Fancy Bear Tracking of Ukrainian Field Artillery Units". CrowdStrike. 22 December 2016. CrowdStrike associates the use of X-Agent with an actor we call FANCY BEAR. This actor to date is the exclusive operator of the malware
  2. ^ Williams, Martyn (4 February 2015). "New iOS spyware steals pictures, data, and more even from non-jailbroken iPhones". PC World. Retrieved 22 July 2016.
  3. ^ Ranger, Steve (6 February 2015). "iOS spyware steals texts, photos, contacts, switches on voice recorder". ZD Net. Retrieved 22 July 2016.
  4. ^ "Pawn Storm Update: iOS Espionage App Found". Trend Micro. 4 February 2015.
  5. ^ "Defense ministry denies reports of alleged artillery losses because of Russian hackers' break into software". Interfax-Ukraine. January 6, 2017.