I didn't catch any reporting about any malware code that Snowden retrieved, can you link me to those new stories? I remember an config file regarding the XKeys

I didn't catch any reporting about any malware code that Snowden retrieved, can you link me to those new stories? I remember an config file regarding the XKeyscore tool, but nothing else.