Leak of the XWorm malware builder turned a remote access trojan into a surveillance platform

The public leak of the XWorm builder and the source code for modified version 6.4 contributed to the malware’s growth and the release of new versions. Netskope tracked four XWorm versions in the wild, 46 plugins, and new capabilities for location tracking, audio capture, and live browser control.