BothanSpy is only compiled as x86.0+. The leaked CIA user manual of Gyrfalcon v1.0 reads. The tool runs in an automated fashion. It is configured in advance, executed on the remote host and left running. WikiLeaks has published the leaked 15th batch of popular batch of software software on the CIA Vault 7. The leak detailed the CIA’s ongoing time-spying efforts to hack into computers running the Microsoft Windows operating system (Secure Shell)
Source: https://thehackernews.com/2017/07/ssh-credential-hacking.html