GRU use XAgent on DCCC Employee 2

April 22, 2016
GRU hackers use X-Agent to keylog and screenshot activity of DCCC Employee 2 including DCCC finances and individual banking and personal information.[i] They also moved exfiltrated data to another leased computer in Illinois.[ii]

[i] U.S. v. Viktor Borisovich Netyksho, et al (1:18-cr-215, District of Columbia) https://www.justice.gov/file/1080281/download

[ii] U.S. v. Viktor Borisovich Netyksho, et al (1:18-cr-215, District of Columbia) https://www.justice.gov/file/1080281/download