FamousSparrow resurfaces to spy on targets in the US, Latin America

Did you know that the China-aligned FamousSparrow APT group is back in action, using the ShadowPad backdoor for the first time?

The FamousSparrow APT group has recently targeted a trade group in the financial sector in the United States, a research institute in Mexico, and a governmental institution in Honduras, as revealed by new ESET research.

During the investigation of one of the affected organizations, ESET’s experts discovered that the group used two new versions of their SparrowDoor backdoor, along with the previously unseen use of the ShadowPad backdoor.

Surprisingly, FamousSparrow has been actively developing its toolset between 2022 and 2024, debunking the belief that the group had become inactive in recent years.

Want to learn more about the group’s latest tactics and procedures? Check out ESET Chief Security Evangelist Tony Anscombe’s insights in the video below and don’t forget to read the full blogpost.

Stay connected with us on Facebook, X, LinkedIn, and Instagram.

Leave a Reply

Your email address will not be published. Required fields are marked *