China-Aligned Threat Group FamousSparrow Deploying SparroWocky Backdoor in Latin America Attacks

China-aligned threat group FamousSparrow has deployed the SparroWocky backdoor, a modular C++ malware, in targeted attacks against Latin American governmental entities since 2025. The malware uses open-source tools and advanced evasion techniques to exfiltrate data and maintain persistence.

The China-aligned state-sponsored threat actor known as FamousSparrow has been observed deploying a previously unreported backdoor called SparroWocky in attacks targeting multiple countries in Latin America since at least August 2025.

"SparroWocky is a modular, C++ backdoor," ESET security researchers Alexandre Côté Cyr and Romain Dumont said in a technical report shared with The Hacker News

Read original article