In depth analysis of X-Agent (including of source code) that was first discovered in 2012 for windows and then modified for Linux and then ios/android and eventually apple. This is the malware found on DNC and DCCC networks and blamed on the Russians.
https://www.welivesecurity.com/wp-content/uploads/2016/10/eset-sednit-part-2.pdf