Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 23:15:55 UTC
Home > List all groups > List all tools > List all groups using tool Fantasy
 Tool: Fantasy
Names Fantasy
Category Malware
Type Wiper
Description
(ESET) The Fantasy wiper is built on the foundations of the previously reported Apostle wiper
but does not attempt to masquerade as ransomware, as Apostle originally did. Instead, it goes
right to work wiping data. Victims were observed in South Africa – where reconnaissance
began several weeks before Fantasy was deployed – Israel, and Hong Kong.
Information Last change to this tool card: 27 December 2022
Download this tool card in JSON format
All groups using tool Fantasy
Changed Name Country Observed
APT groups
 Agrius 2020-May 2023
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1ccfe116-0aba-4c9f-87da-a8bf7517e19d
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=1ccfe116-0aba-4c9f-87da-a8bf7517e19d
Page 1 of 1