FjordPhantom

Description

(Promon) Through longtime Promon partner i-Sprint, our Security Research team received reports of a new Android malware spreading in Southeast Asia in early September, primarily Indonesia, Thailand, and Vietnam. Promon also believes that the malware is active in Singapore and Malaysia. Spreading primarily through messaging services, it combines app-based malware with social engineering to defraud banking customers. In discussions with banks in the region, Promon has learned that one customer was defrauded out of 10 million Thai Baht (approximately $280,000) at the time of writing.

Names

Name
FjordPhantom

Category

Malware

Type

  • Banking trojan

Information

Mitre Attack

Other Information

Uuid

dfe29653-32f9-4b24-badb-421f913e3936

Last Card Change

2025-06-28