Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

Researchers have identified three separate espionage campaigns that share infrastructure and malware code, indicating a connection between them. These campaigns have targeted various organizations, including telecommunications providers, government entities, and research institutions, across multiple regions. The targeted regions include Latin America, Asia, and Europe, and the campaigns have been active over the past year. The malware ecosystem linked to these campaigns is referred to as Sparrow. Check Point Research has assigned the names SilentDelivery to one of the clusters, and is tracking the activity. The campaigns have focused on entities such as military organizations and critical infrastructure.