CopperDragon tooling linked to China-nexus espionage across three regions
SilentDelivery, OceanGate and DarkWire hit telecom, government and critical infrastructure with shared backdoors and credential tools.
76
Malware
AnnobinDoor
- Mentions · 7d2
- Mentions · 30d2
- All mentions2
- First seenNov 10, 2026
- Last mentioned15h ago
Timeline
2 articles · newest firstCheck Point links three China-nexus clusters via Sparrow malware
SilentDelivery, OceanGate, and DarkWire share tooling from CopperDragon, assessed as a quartermaster for several China-linked groups.
74
Appears with
- Earth Estriesthreat actor · 2
- Salt Typhoonthreat actor · 2
- SparrowDoormalware · 2
- UAT-9244threat actor · 2
- FamousSparrowthreat actor · 2
- SquadCmalware · 2
- SparrowShellmalware · 2
- UAT-8302threat actor · 1
- CopperLoggermalware · 1
- CopperDNSmalware · 1
- CopperDragonthreat actor · 1
- ExaTrackorganization · 1
- Sparrowmalware · 1
- HemiGatemalware · 1
- Cisco Talosorganization · 1
- Positive Technologiesorganization · 1
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.