Notorious Chinese hackers FamousSparrow allegedly target US financial firms

• ESET discovers multiple new variants of SparrowDoor, a piece of malware used by FamousSparrow
• The investigation uncovered group's activity between 2022-2024
• It was targeting government agencies, researchers, and financial institutions

FamousSparrow, a Chinese state-sponsored threat actor thought to be retired, is not only active, but has been targeting government, financial organizations, and research institutes, for years now, experts have revealed.

Cybersecurity researchers at ESET recently stumbled upon a new variant of FamousSparrow’s malware, leading them down a rabbit hole exposing the group's activities across the globe.

ESET said that it was brought in by an unnamed trade group in the United States, operating in the financial sector, to assist with a malware infection. The investigators found two previously undocumented versions of SparrowDoor, FamousSparrow’s flagship backdoor.

Monitor your credit score with TransUnion starting at $29.95/month

TransUnion is a credit monitoring service that helps you stay ...