China’s FamousSparrow Strikes Again: Snooping 2.0 or Just Sparrow Door-ing It?
FamousSparrow, the China-aligned cyber espionage group, has made a grand reappearance, targeting organizations in the US and Mexico. After a hiatus, they unveiled upgraded versions of their SparrowDoor backdoor. Looks like they’ve been busy in the shadows, sharpening their tools while everyone thought they were on vacation!

Hot Take:
FamousSparrow might have been the quiet kid in the back of the cybersecurity class, but boy, did they come back with a bang! Like a plot twist in a spy thriller, they’ve revealed two new versions of their SparrowDoor backdoor, proving that even digital sparrows can pack a punch. Maybe they were just taking a gap year to refine their hacking skills? Either way, they’re back, and they’re causing quite the ruckus!
Key Points:
- FamousSparrow, a China-aligned cyber espionage group, has resurfaced after a period of inactivity.
- They’ve targeted a US financial trade group, a Mexican research institute, and potentially a Honduran government body.
- The group developed two new versions of their SparrowDoor backdoor during their “quiet” phase.
- FamousSparrow was found using ShadowPad, a backdoor linked to Chinese attackers.
- Despite similarities, FamousSparrow is considered a distinct entity from other Chinese APT groups like Salt Typhoon.
Already a member? Log in here