/
attack_type:backdoor × criticity:high × latest_source_host:welivesecurity.com × limpar

Resultados

2 casos · pág. 1/1

welivesecurity.com · high

FamousSparrow deploys new SparroWocky backdoor against Latin American governments, replacing SparrowDoor

ESET Research reports that the China-aligned APT group FamousSparrow has been using a new modular C++ backdoor, SparroWocky, since at least August 2025. The backdoor has replaced SparrowDoor as the group's main implant. From mid-2025 into 2026, about 90% of the group's targets in ESET telemetry were in Latin America, mostly governmental e…

welivesecurity.com · high

UAC-0099 evolves MATCHBOIL C# downloader targeting Ukrainian transport, manufacturing and energy firms

ESET documented the evolution of MATCHBOIL, a custom C downloader used by the Russia-aligned cyberespionage group UAC-0099. Samples span April 2024 to April 2026, although CERT-UA first documented the malware in August 2025. Each iteration became more sophisticated, with new obfuscation, sandbox checks and persistence methods. All victims…