Three China-Nexus Espionage Campaigns Linked to Sparrow Malware
Sparrow Malware
Three threat clusters utilizing the Sparrow malware ecosystem have targeted telecommunications, government, and critical infrastructure across multiple regions. Researchers identified shared infrastructure and code similarities linking these campaigns.
why this severityConfirmed real-world espionage campaigns affecting multiple named sectors.
- first report
- 10 Nov 2026
- last update
- 10 Nov 2026
Timeline · 1
Sources · 1
News and write-ups
- 2026-11-10Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware EcosystemThe Hacker News · thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html
Titles and links belong to their publishers. The summary above is written by gcdRadar in its own words; data is CC BY-SA 4.0.
Classification
- AI role
- No AI role
- categories
- General security
- severity
- 3 · Confirmed exploitation
- targets
- Individuals
- owasp llm top 10
- no entry for these categories
- mitre atlas
- no technique for these categories
- dates
- happened 10 Nov 2026 · first reported 10 Nov 2026
- origin
- News & research feeds
- record
- confidence 0.90 · created 2026-11-10 20:42Z · updated 2026-11-10 20:42Z
Lane, AI role, categories and severity come from the classifier; the OWASP and ATLAS rows are derived from the categories. How these are assigned
Copy a brief
This record as a short Markdown brief, for a ticket, a chat or a coding agent.
the brief as text
# Three China-Nexus Espionage Campaigns Linked to Sparrow Malware https://gcdradar.vercel.app/incidents/three-china-nexus-espionage-campaigns-linked-to-sparrow-malw · AIR-2026-1867 · live - Lane: Breaches & attacks - Severity: 3 (Confirmed exploitation): Confirmed real-world espionage campaigns affecting multiple named sectors. - Fix status: No fix needed - First reported: 2026-11-10 - AI role: No AI role - Products: Sparrow Malware ## Summary Three threat clusters utilizing the Sparrow malware ecosystem have targeted telecommunications, government, and critical infrastructure across multiple regions. Researchers identified shared infrastructure and code similarities linking these campaigns. ## What to do No action recorded; read the sources below and the vendor's advisory. ## Latest updates - 2026-11-10: Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem (https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html) ## Sources - 2026-11-10 The Hacker News: Three China-Nexus Espionage Campaigns Linked Through Sparrow Malware Ecosystem https://thehackernews.com/2026/11/three-china-nexus-espionage-campaigns.html Verify against the vendor's advisory before changing production. Data CC BY-SA 4.0, https://gcdradar.vercel.app.
Related
- liveWARDEN Stealer distributed via fake Grand Theft Auto VI download links
Breaches & attacks · Exploited · since 13 Nov 2026
- liveZoom North Korean hackers steal $400M via fake Zoom and Teams video calls
Breaches & attacks · Real loss · since 12 Nov 2026
- liveBinance US seizes North Korean hacking infrastructure linked to Binance theft
Breaches & attacks · Real loss · since 13 Nov 2026
- liveExtortion Group Luna Moth Targets Law Firms With Microsoft Token Theft
Breaches & attacks · Exploited · since 12 Nov 2026
- liveFaceTime Iran-backed Network Directed Attacks on European and US Sites
Breaches & attacks · Real loss · since 11 Nov 2026
- liveRussian hackers compromise government email servers in Romania and Kazakhstan
Breaches & attacks · Exploited · since 10 Nov 2026 · updated 12 Nov 2026