Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-06 00:50:41 UTC
Home > List all groups > List all tools > List all groups using tool FjordPhantom
 Tool: FjordPhantom
Names FjordPhantom
Category Malware
Type Banking trojan
Description
(Promon) Through longtime Promon partner i-Sprint, our Security Research team
received reports of a new Android malware spreading in Southeast Asia in early
September, primarily Indonesia, Thailand, and Vietnam. Promon also believes that the
malware is active in Singapore and Malaysia. Spreading primarily through messaging
services, it combines app-based malware with social engineering to defraud banking
customers. In discussions with banks in the region, Promon has learned that one
customer was defrauded out of 10 million Thai Baht (approximately $280,000) at the
time of writing.
Information MITRE ATT&CK Last change to this tool card: 28 June 2025
Download this tool card in JSON format
All groups using tool FjordPhantom
Changed Name Country Observed
Unknown groups
 _[ Interesting malware not linked to an actor yet ]_
1 group listed (0 APT, 0 other, 1 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=dfe29653-32f9-4b24-badb-421f913e3936
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=dfe29653-32f9-4b24-badb-421f913e3936
Page 1 of 1