MITRE ATT&CKsoftware (malware)

S1208 FjordPhantom

Published 2025-03-12 Modified 2025-03-12 Official page ↗
Domain
mobile
Platforms
Android
Version
1.0
Created
2025-03-12

Description

FjordPhantom is a malicious Android application first discovered in September 2024 with targets in Southeast Asia, specifically Indonesia, Thailand, and Vietnam. FjordPhantom was distributed through email and messaging applications. Once installed, the application launches a virtualization solution to steal important information, such as bank accounts, and to manipulate the user interface. The malicious activity from the virtualization solution runs alongside legitimate banking applications.

Related

Uses · MITRE ATT&CK (5)

  • T1670 Virtualization Solution technique
  • T1660 Phishing technique
  • T1655 Masquerading technique
  • T1631 Process Injection technique
  • T1617 Hooking technique

References