Nation-stateSep 21, 2026
China-Linked FamousSparrow Deploys SparroWocky Backdoor in Latin America
China-linked FamousSparrow targets Latin American governments with SparroWocky backdoor.
Summary
The threat actor FamousSparrow, believed to be linked to China, has been observed targeting government entities in Latin America. They are deploying a new C++ backdoor named SparroWocky, which is capable of exfiltrating files, capturing screenshots, and evading security measures.
Indicators of Compromise
- malware — SparroWocky
Entities
FamousSparrow (threat_actor)C++ (technology)