CrowdStrike: Vapor Panda used ARTEX against over 200 organizations
From October 17 the China-linked group hit ministries, telecoms, and U.S. defense-related targets; post-exploitation is confirmed at nine.
86
Threat actor
Earth Estries
- Mentions · 7d1
- Mentions · 30d1
- All mentions4
- First seenSep 17, 2026
- Last mentioned2d ago
Timeline
4 articles · newest firstFamousSparrow Swaps SparrowDoor For New SparroWocky Backdoor
China-aligned FamousSparrow deployed its new SparroWocky backdoor against Latin American governments since August 2025, initially accessing networks via exploited Exchange servers.
78
China-Aligned FamousSparrow Deploys SparroWocky Backdoor Across Latin America
China-aligned espionage group FamousSparrow replaced SparrowDoor with a new modular backdoor, SparroWocky, targeting government entities across eight Latin American countries since August 2025.
74
Beware the SparroWock: The backdoor that bites, the commands that catch
ESET attributes a new modular C++ backdoor, SparroWocky, to China-aligned group FamousSparrow, deployed against government entities across Latin America since August 2025.
75
Appears with
- SparrowDoormalware · 3
- SparroWockymalware · 3
- FamousSparrowthreat actor · 3
- ESETvendor · 3
- Trend Microvendor · 2
- Salt Typhoonthreat actor · 2
- Hollow Pandathreat actor · 1
- FlowCloudmalware · 1
- DeepSeekai model · 1
- ShadowPadmalware · 1
- Overcast Pandathreat actor · 1
- Exchangeproduct · 1
- CrowdStrikeorganization · 1
- Veiled Pandathreat actor · 1
- SparrowDoorproduct · 1
- SparroWockyproduct · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.