SparroWocky is a sophisticated C++ backdoor used by the China-aligned FamousSparrow APT group since August 2025. It targets governmental organizations in Latin America with advanced evasion and modular capabilities. The backdoor uses reflective loading, call stack spoofing, encrypted communications, and host process camouflage to avoid detection. It replaces a previous backdoor called SparrowDoor and incorporates open-source projects within its codebase. The threat actor's focus aligns with geopolitical interests in monitoring Latin American governmental responses to US pressures.