Home / malware

PDF

IOS.Xagent

First posted on 06 February 2015.
Source: Symantec

Aliases :

There are no other names known for IOS.Xagent.

Explanation :

Once executed, the Trojan connects to the following remote location:
http://198.27.64.218
The Trojan then opens a back door on the compromised computer, allowing an attacker to perform the following actions:
Record audioTake screen shotsUpload and download filesList files on the phoneList running processes
The Trojan may also gather the following information and send it to a remote location:
Network statusList of installed applicationsContact listGeolocation dataPictures stored on the deviceSMS messages

Last update 06 February 2015

 

TOP