FamousSparrow Deploys New SparroWocky Backdoor in Latin America

Thu, 17 Sep 2026 15:32:45 +0000

Engineer — Learn: No CVE or patchable software surface identified — this is a modular C++ backdoor deployed by a nation-state actor. Review ESET’s technical report for evasion techniques that may inform detection or hardening decisions.
SOC/IR — Learn: No IOCs or ATT&CK mappings surfaced in the current summary; read the full ESET technical report to extract TTPs and candidate detection rules, especially if your environment covers Latin American entities or sectors FamousSparrow has historically targeted.
Leader — Learn: A China-aligned APT expanding campaign scope into Latin America is worth tracking for sector and geographic risk awareness, but no vendor breach or regulation deadline makes immediate leadership action necessary.

Latin-America on CuraSec