<![CDATA[China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America]]>FamousSparrow, a China-aligned state-sponsored threat actor, has been observed deploying a previously unreported backdoor dubbed SparroWocky in attacks against multiple countries across Latin America since at least August 2025.

According to ESET security researchers Alexandre Côté Cyr and Romain Dumont, SparroWocky is a modular backdoor written in C++. The findings were detailed in a technical report shared with The Hacker News.

Key points from the report:

  • The threat actor is tracked as FamousSparrow and assessed to be aligned with Chinese state interests.
  • The newly identified implant, SparroWocky, is modular and built in C++.
  • Targeting has focused on multiple countries in Latin America.
  • Activity has been ongoing since at least August 2025.

Readers running ESET telemetry or threat intelligence feeds should review their detections for this activity, particularly if they operate in Latin American regions or adjacent sectors historically targeted by FamousSparrow.

Source: The Hacker News
Does your organization have visibility into C++-based modular backdoors like SparroWocky, and if so, how are you detecting them?

]]>https://xploitlk.com/topic/401/china-aligned-famoussparrow-deploys-sparrowocky-backdoor-across-latin-americaRSS for NodeTue, 27 Oct 2026 08:52:05 GMTSun, 20 Sep 2026 10:30:18 GMT60