GoKawiilChinese APT FamousSparrow deploys new SparroWocky backdoor against Latin American governments
ESET researchers report that the Chinese-linked espionage group FamousSparrow shifted in mid-2025 to focus exclusively on government targets in Central and South America, replacing its older SparrowDoor malware with a newly built implant called SparroWocky. The group, loosely tied to Earth Estries and Salt Typhoon, appears to be zeroing in on agencies overseeing Chinese investments now under scrutiny from the Trump administration.
GoKawiil's interpretation of the reporting above, not reported fact.
This regional pivot suggests Beijing-aligned actors are prioritizing intelligence on how the US is monitoring China's economic footprint in Latin America, a geopolitically sensitive area amid rising US-China competition. The rebuild of core tooling also indicates FamousSparrow is adapting to evade detection as its older backdoor became widely fingerprinted and cloned by other threat groups.
- FamousSparrow now targets Latin American governments almost exclusively since July 2025.
- The group replaced its aging SparrowDoor backdoor with a newly engineered tool called SparroWocky.
- Targets include agencies overseeing Chinese investments facing US scrutiny.
YubiKey 5 NFC Security Key — State-sponsored APT groups like FamousSparrow rely on stolen credentials and backdoors to infiltrate government and corporate networks. A hardware security key like the YubiKey adds phishing-resistant multi-factor authentication, making it far harder for attackers to compromise accounts even if passwords leak. It's a practical step for IT admins and security-conscious individuals looking to harden their defenses against sophisticated cyber-espionage campaigns.
See YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: darkreading.com — Nate Nelson, 2026-09-17
Published there as: “China's FamousSparrow APT Spies on US Politics in Latin America”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.