X-Agent (alternatively known as CHOPSTICK or SPLM).
Common modules focus on searching local files, dumping browser passwords, taking screenshots, and logging keystrokes. Agent.X.rar
An Android variant was reportedly used to target Ukrainian military personnel by infecting a legitimate artillery targeting app. 4. Removal and Mitigation X-Agent (alternatively known as CHOPSTICK or SPLM)
APT28 (Fancy Bear), a group attributed to the Russian GRU. dumping browser passwords
It often embeds itself via registry keys or scheduled tasks to remain active after system reboots. 3. Historical Significance
Modular architecture allows it to target Windows, Linux, macOS (as XAgentOSX), iOS, and Android. 2. Technical Characteristics
A US grand jury indictment alleged that X-Agent was used to hack the DNC and DCCC networks beginning in April 2016.