DoubleFantasy (ELF)

First seen
2013-05-01 00:00:00
Malware type
backdoor
Profile updated
2026-07-07 14:23:44

Targeted industries: government-and-public-sector technology-and-telecommunications

Targeted regions: country_code:cn country_code:ru

Context

DoubleFantasy is an early-stage implant used for reconnaissance and information gathering by advanced persistent threats, specifically targeting government and technology sectors. It acts as a backdoor to facilitate further infiltration by more advanced tools.

Reports & references

  • Kaspersky — 98440 (report)
  • malpedia.caad.fkie.fraunhofer.de — Elf.Doublefantasy (report)
  • antiy.com — From Equation To Equations (report)

External references