TF-MAL-ios.xagent
📛 Threat Title
Malware family: X-Agent
Description
ThreatFox malware family `ios.xagent`. Printable name: X-Agent.
Indicators of Compromise (1)
Each indicator is enriched from the IOC database, threat-intel feed corroboration (Threat Hunt) and VirusTotal. Click one to expand.
domain
ios.xagent
VT: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/ios.xagent
IOC database
- Type
- domain
- Value
ios.xagent- First seen
- Last seen
- Attached to this threat
- Appears in
- 1 threat
- Description
- Extracted from Threat TF-MAL-ios.xagent
Threat Hunt — feed corroboration
Not present in any configured threat-intel feed.
Details From VirusTotal
VirusTotal: VT base fetch failed: HTTPError: 429 Client Error: Too Many Requests for url: https://www.virustotal.com/api/v3/domains/ios.xagent
References (1)
- ThreatFox: IOCs for this family ThreatFox Malwares
Remediations (10)
-
web:attack.mitre.org
MITRE ATT&CK ® is a globally-accessible knowledge base of adversary tactics and techniques based on real-world observations. The ATT&CK knowledge base is used as a foundation for the development of specific threat models and methodologies in the private sector, in government, and in the cybersecurity product and service community. With the creation of ATT&CK, MITRE is fulfilling its mission ...
-
web:docs.trellix.com
After an infected file is placed in quarantine, the Endpoint Security (HX) xAgent 's malware protection engines perform specific remediation actions to prevent the infection from spreading to other files on the host endpoint or to other endpoints on your network. These remediation actions include cleaning the infected file, removing any malware traces, and notifying the endpoint user when a ...
-
web:en.wikipedia.org
X-Agent or XAgent is a spyware and malware program designed to collect and transmit hacked files from machines running Windows, Linux, iOS, or Android, to servers operated by hackers.
-
web:genai.owasp.org
Explore key threats and mitigation strategies for agentic AI, focusing on security measures to address vulnerabilities in AI applications and their potential risks.
-
web:malpedia.caad.fkie.fraunhofer.de
Details for the X-Agent malware family including references, samples and yara signatures.
-
web:microsoft.github.io
Security and IT teams must review vulnerability findings, prioritize remediation based on severity, and apply fixes using agentless or agent -based scanning tools.
-
web:phoenix.security
VS Code extension malware hit GitHub on May 20, 2026. TeamPCP exfiltrated 3,800 internal repos. No CVE. Full analysis, IOCs, detection.
-
web:www.cisa.gov
It highlights technical approaches to uncovering malicious activity and includes mitigation steps according to best practices. The purpose of this report is to enhance incident response among partners and network administrators along with serving as a playbook for incident investigation.
-
web:www.linkedin.com
XAgent is a spyware targeting iOS devices, representing a mobile implant. Publicly attributed to the group APT28 (also known as Sofacy or Fancy Bear), XAgent is consistent with TTPs of targeting ...
-
web:www.ncsc.gov.uk
This guidance helps private and public sector organisations deal with the effects of malware (which includes ransomware). It provides actions to help organisations prevent a malware infection, and also steps to take if you're already infected. Following this guidance will reduce: the likelihood of becoming infected the spread of malware throughout your organisation the impact of the infection
AI Forensic Analysis
Only Available for Registered Users. Sign in to view.