other

SparroWocky

A modular Windows backdoor written in C++, attributed to the FamousSparrow group, with screen capture, file operations, Beacon Object File loading and TCP proxying built in.

Current clusters

security1 publisher

FamousSparrow replaced SparrowDoor with SparroWocky in a year of Latin American intrusions

ESET traced more than a year of espionage against government organizations in eight Latin American countries and territories to a modular C++ implant that hooks CreateThread so every thread it spawns looks like AnimateWindow.

Publishers:bleepingcomputer.com

Reality

Evidence66
Adoption58
Hype gap+5
Incentives55
Confidence63