started · updated
FamousSparrow cyberespionage group targets Latin American governments
The Chinese-aligned cyberespionage group FamousSparrow (also referred to as Salt Typhoon) has significantly shifted its operations toward Latin America. According to security researchers at ESET, approximately 90 percent of the group's activity between mid-2025 and 2026 was concentrated in the region.
The group has deployed a new, modular C++ backdoor known as SparroWocky. This malware utilizes DLL side-loading techniques to evade detection and includes roughly 30 commands capable of system profiling, file exfiltration, TCP traffic relaying, and capturing screenshots.
Targeted entities include government agencies in Argentina, Ecuador, Guatemala, Honduras, Panama, Peru, Puerto Rico, and Venezuela. Researchers suggest this sudden geographical pivot may be a response to renewed United States interests and initiatives in Latin America under the administration of Donald Trump, which could threaten long-term Chinese investments in the region's energy, mining, and telecommunications sectors.
Entities
Donald Trump · ESET · FamousSparrow · Latin America · SparroWocky
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 3 SOURCES] The SparroWocky backdoor features approximately 30 commands, including system profiling, file exfiltration, and screenshot grabbing. www.it-boltwise.de · www.techradar.com · dev.to
- [● 3 SOURCES] Targeted government entities include Argentina, Ecuador, Guatemala, Honduras, Panama, Peru, Puerto Rico, and Venezuela. ticosland.com · ticoslandia.com · www.techradar.com
- [● 5 SOURCES] The Chinese-aligned cyberespionage group FamousSparrow has deployed a new C++ backdoor named SparroWocky. ticosland.com · ticoslandia.com · www.it-boltwise.de · www.techradar.com · dev.to
- [● 2 SOURCES] The malware is deployed using DLL side-loading techniques to evade detection. www.it-boltwise.de · dev.to
- [○ 1 SOURCE] Researchers suggest the shift in focus to Latin America may be a response to increased US interests in the region under Donald Trump. www.techradar.com
- [● 4 SOURCES] Approximately 90 percent of FamousSparrow’s targets were located in Latin America between mid-2025 and 2026. ticosland.com · ticoslandia.com · www.techradar.com · dev.to