Check Point links three intrusion clusters to suspected supplier CopperDragon
SilentDelivery, OceanGate, and DarkWire share Sparrow code or infrastructure across Latin America, Asia, and Europe.
74
Threat actor
DarkWire
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 10, 2026
- Last mentioned5h ago
Timeline
2 articles · newest firstCheck Point links three China-nexus clusters via Sparrow malware
SilentDelivery, OceanGate, and DarkWire share tooling from CopperDragon, assessed as a quartermaster for several China-linked groups.
74
Appears with
- SparrowDoormalware · 2
- SquadCmalware · 2
- UAT-9244threat actor · 2
- FamousSparrowthreat actor · 2
- SilentDeliverythreat actor · 2
- OceanGatethreat actor · 2
- CopperDragonthreat actor · 2
- Check Point Researchorganization · 2
- Earth Estriesthreat actor · 2
- Salt Typhoonthreat actor · 2
- Sparrowmalware · 1
- SparroWockymalware · 1
- TropicTrooperthreat actor · 1
- SparrowShellmalware · 1
- AnnobinDoormalware · 1
- CopperDoormalware · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.