xsPlus
Description
(Kaspersky) In 2014 the Naikon gang was found to be using another tool that maintains an internal name “xsPlus” and “xsControl”. This builder and its backdoors produce components with the “NOKIAN95/WEBx” user-agent strings, for which there are multiple versions.
Names
| Name |
|---|
| xsPlus |
| xsControl |
| nokian |
Category
Malware
Type
- Loader
- Backdoor
Information
- https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2018/03/07205555/TheNaikonAPT-MsnMM1.pdf
- https://securelist.com/analysis/publications/69953/the-naikon-apt/
- https://www2.fireeye.com/rs/fireye/images/rpt-apt30.pdf
Malpedia
Other Information
Uuid
e0d785f4-56fb-46ad-a134-0b50133bdc03
Last Card Change
2020-05-14