Check Point links three intrusion clusters to suspected supplier CopperDragon
SilentDelivery, OceanGate, and DarkWire share Sparrow code or infrastructure across Latin America, Asia, and Europe.
74
Threat actor
CopperDragon
- Mentions · 7d4
- Mentions · 30d4
- All mentions4
- First seenNov 10, 2026
- Last mentioned5h ago
Timeline
4 articles · newest firstSilentDelivery uses fake Chrome warnings to install Sparrow backdoor
Check Point says compromised sites push a Windows installer; the chain does not show a Chrome vulnerability.
76
Check Point links three China-nexus clusters via Sparrow malware
SilentDelivery, OceanGate, and DarkWire share tooling from CopperDragon, assessed as a quartermaster for several China-linked groups.
74
CopperDragon Sparrow framework tied to espionage on three continents
SilentDelivery, OceanGate and DarkWire share Sparrow tooling against telecom, government, military and research targets.
78
Appears with
- SparrowDoormalware · 4
- UAT-9244threat actor · 4
- Earth Estriesthreat actor · 4
- SquadCmalware · 4
- FamousSparrowthreat actor · 4
- CopperDNSmalware · 3
- Salt Typhoonthreat actor · 3
- TropicTrooperthreat actor · 3
- CopperDoormalware · 3
- SparrowShellmalware · 2
- DarkWirethreat actor · 2
- Melofeemalware · 2
- SilentDeliverythreat actor · 2
- Sparrowmalware · 2
- OceanGatethreat actor · 2
- Check Point Researchorganization · 2
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.