Skip to content

S0314 X-Agent for Android

X-Agent for Android is Android malware that was placed in a repackaged version of a Ukrainian artillery targeting application. The malware reportedly retrieved general location data on where the victim device was used, and therefore could likely indicate the potential location of Ukrainian artillery. 1 Is it tracked separately from the CHOPSTICK.

Item Value
ID S0314
Type MALWARE
Version 1.0
Created 25 October 2017
Last Modified 24 October 2022
Navigation Layer View In ATT&CK® Navigator

Techniques Used

Domain ID Name Use
mobile T1430 Location Tracking X-Agent for Android was believed to have been used to obtain locational data of Ukrainian artillery forces.1

Groups That Use This Software

ID Name References
G0007 APT28 1

References

  1. CrowdStrike Global Intelligence Team. (2016). Use of Fancy Bear Android Malware in Tracking of Ukrainian FIeld Artillery Units. Retrieved February 6, 2017. ↩↩↩