Security researchers say suspected China-nexus activity is tied across three separate hacking campaigns through a shared Sparrow malware framework. Infosecurity Magazine reports that Check Point links multiple China-nexus clusters using code and tooling similarities connected to Sparrow, which it describes as a malware framework used across campaigns.
Across coverage, the campaigns are presented as distinct but related, with shared infrastructure and overlaps in malware characteristics. The Hacker News adds that the activity spans targets including telecommunications providers, government organizations, military entities, research institutions, and critical infrastructure, with observed activity across Latin America, Asia, and Europe over the past year. Both outlets point to Check Point’s clustering of the activity, though they emphasize different levels of breadth—one focusing on the linkage via Sparrow’s framework, the other on the range of targeted sectors and geographies.
