← All talks

Deconstructing APT28's XAgent for OSX

BSidesSF · 201819:11383 viewsPublished 2018-04Watch on YouTube ↗
Speakers
Tags
StyleTalk
About this talk
Tiberius Axinte - Deconstructing APT28's XAgent for OSX Until now APT28 was only available for Windows, Linux and iOS operating systems. Now we've discovered macOS version that which brings more spying capabilities such as key-logging, screen grabbing and file exfiltration and stealing iOS backups from Mac computers, which contain messages, contacts, voicemail, call history, notes, calendar and Safari data. The macOS version, is the most advanced version of APT28 in terms of cyber espionage capabilities.