The trojan can receive new modules from Command and Control (C2) servers to expand its capabilities.
APT28 (Fancy Bear), a group attributed to the Russian GRU.
X-Agent (alternatively known as CHOPSTICK or SPLM). Agent.X.rar
Modular architecture allows it to target Windows, Linux, macOS (as XAgentOSX), iOS, and Android. 2. Technical Characteristics
Android and iOS variants have been used to track device location and steal iPhone backups from connected computers. The trojan can receive new modules from Command
As detailed by security researchers at ESET and Palo Alto Networks , X-Agent is designed for long-term espionage.
Security vendors like Microsoft and Malwarebytes flag this threat under various names, such as . Modular architecture allows it to target Windows, Linux,
The file is often associated with the X-Agent malware family, a sophisticated modular trojan and spyware program primarily linked to the Russian cyber-espionage group APT28 (also known as Fancy Bear). While "Agent.X" can also refer to benign AI frameworks or SNMP protocols, a compressed file like a .rar is a common delivery method for this malware. 1. Malware Identification