gcdRadar
live/Breaches & attacks/AIR-2026-1867
liveliveBreaches & attacks3 Confirmed exploitation

Three China-Nexus Espionage Campaigns Linked to Sparrow Malware

Sparrow Malware

Three threat clusters utilizing the Sparrow malware ecosystem have targeted telecommunications, government, and critical infrastructure across multiple regions. Researchers identified shared infrastructure and code similarities linking these campaigns.

why this severityConfirmed real-world espionage campaigns affecting multiple named sectors.

first report
10 Nov 2026
last update
10 Nov 2026

Timeline · 1

  1. 10 Nov 2026Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem

Sources · 1

News and write-ups

  1. 2026-11-10
    Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem
    The Hacker News · thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html

Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.

Classification

AI role
No AI role
categories
General security
severity
3 · Confirmed exploitation
targets
Individuals
owasp llm top 10
no entry for these categories
mitre atlas
no technique for these categories
dates
happened 10 Nov 2026 · first reported 10 Nov 2026
origin
News & research feeds
record
confidence 0.90 · created 2026-11-10 20:42Z · updated 2026-11-10 20:42Z

Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned

Copy a brief

This record as a short Markdown brief, for a ticket, a chat or a coding agent.

the brief as text
# Three China-Nexus Espionage Campaigns Linked to Sparrow Malware

https://gcdradar.vercel.app/incidents/three-china-nexus-espionage-campaigns-linked-to-sparrow-malw · AIR-2026-1867 · live

- Lane: Breaches & attacks
- Severity: 3 (Confirmed exploitation): Confirmed real-world espionage campaigns affecting multiple named sectors.
- Fix status: No fix needed
- First reported: 2026-11-10
- AI role: No AI role
- Products: Sparrow Malware

## Summary

Three threat clusters utilizing the Sparrow malware ecosystem have targeted telecommunications, government, and critical infrastructure across multiple regions. Researchers identified shared infrastructure and code similarities linking these campaigns.

## What to do

No action recorded; read the sources below and the vendor's advisory.

## Latest updates

- 2026-11-10: Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem (https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html)

## Sources

- 2026-11-10 The Hacker News: Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html

Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.

Related

  1. live
    WARDEN Stealer distributed via fake Grand Theft Auto VI download links

    Breaches & attacks · Exploited · since 13 Nov 2026

  2. live
    Zoom North Korean hackers steal $400M via fake Zoom and Teams video calls

    Breaches & attacks · Real loss · since 12 Nov 2026

  3. live
    Binance US seizes North Korean hacking infrastructure linked to Binance theft

    Breaches & attacks · Real loss · since 13 Nov 2026

  4. live
    Extortion Group Luna Moth Targets Law Firms With Microsoft Token Theft

    Breaches & attacks · Exploited · since 12 Nov 2026

  5. live
    FaceTime Iran-backed Network Directed Attacks on European and US Sites

    Breaches & attacks · Real loss · since 11 Nov 2026

  6. live
    Russian hackers compromise government email servers in Romania and Kazakhstan

    Breaches & attacks · Exploited · since 10 Nov 2026 · updated 12 Nov 2026