Skip to content

Spyware

AgfSpy

The agfSpy backdoor retrieves configuration and commands from its C&C server.

AgfSpy is a Windows spyware.

Background

The agfSpy backdoor pulls its configuration and instructions from a C&C server. Through these instructions it can run shell commands and return the output to the operator. It is also able to enumerate directories and to list, upload, download, and execute files, among other tasks. Its feature set closely mirrors that of dneSpy, the main differences being that each backdoor talks to a distinct C&C server and uses different message formats.


Source: Malpedia (Fraunhofer FKIE).