HOMETHREATSX-Agent
APT / THREAT GROUP

X-Agent

10
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: apk.popr-d30

Threat Analysis

X-Agent is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→http://csecybsec.com/download/zlab/20180713_CSE_APT28_X-Agent_Op-Roman%20Holiday-Report_v6_1.pdf
→http://www.welivesecurity.com/wp-content/uploads/2016/10/eset-sednit-part-2.pdf
→http://www2.fireeye.com/rs/fireye/images/rpt-apt28.pdf
→https://assets.documentcloud.org/documents/3461560/Google-Aquarium-Clean.pdf
→https://contagiodump.blogspot.de/2017/02/russian-apt-apt28-collection-of-samples.html

Quick Facts

TypeAPT / Threat Group
Aliases10

Also Known As

splmwin.xagentapk.popr-d30elf.xagentios.xagentPopr-d30fysbischopstickX-Agentosx.xagent

External Intelligence

Malpedia: win.xagent

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search X-Agent