Not All That Glitters Is Gold: Tracking CopperDragon's Sparrow Framework Around the Globe

CopperDragon is a malware framework linked to China-nexus threat actors targeting high-profile organizations globally, including in Latin America, Asia, and Europe. It supports multiple intrusion campaigns grouped into three clusters—SilentDelivery, OceanGate, and DarkWire—each using distinct backdoors and sophisticated techniques such as kernel rootkits, trojanized SSH tools, and credential harvesting across Linux and Windows systems. The campaigns focus on government, critical infrastructure, and telecommunications sectors.

• Melofee: a look back at a Linux implant and its new variantsMalware2026-09-10
• South American telecommunication providers targeted with three new malware implantsMalware2026-03-05
• VAPOR PANDA Uses AI-Driven ARTEX to Grow Global Espionage CampaignMalware2026-10-31
• China-nexus UAT-11587 targets government and policy organizations across Asia with Antino backdoorMalware2026-09-30
• Beware the SparroWock: The backdoor that bites, the commands that catchMalware2026-09-17