FamousSparrow hackers target Central American governments

An investigation by cybersecurity firm ESET has identified a series of cyberespionage operations conducted by the hacking group FamousSparrow against government institutions in Central America. The campaign, active since 2025, utilizes a malicious program called ‘SparroWocky’ to steal documents, remotely control computers, and capture screenshots to monitor activities without detection.

Panama has been identified as a highly sensitive target, with attacks potentially linked to strategic disputes regarding Panama Canal port concessions. In Guatemala, government digital security assessments show significant vulnerabilities, while Honduras has announced plans to establish a national computer incident response center to strengthen institutional defenses.

While the operations are linked to interests associated with China, ESET notes that direct evidence of involvement by the Chinese government has not been proven. The campaign has also impacted entities in Argentina, Ecuador, Peru, Venezuela, and Puerto Rico, with 90% of the group's detected targets concentrated in Latin America.