Pawn Storm Update: iOS Espionage App Found

Operation Pawn Storm includes iOS-targeted spyware (XAgent and MadCap) used for targeted espionage; the report analyzes their capabilities (SMS/contacts/photos/location/audio/process/app listing and screenshots), C2 and FTP communications (HTTP GET/POST, randomized URIs, Base64-like tokens, RC4/crypto functions), code structure, possible infection vectors (ad-hoc provisioning link, USB installation from compromised Windows host), and supplies indicators such as file hashes and sample URIs.