Chinese ‘FamousSparrow’ hackers back from the dead and targeting North America, researchers say

ESET investigators uncovered renewed activity by the Chinese government-linked APT group FamousSparrow, identifying upgraded variants of its SparrowDoor backdoor and use of additional tools (including ShadowPad) in attacks against organizations in the U.S., Mexico, and Honduras; the group has historical ties to ProxyLogon exploitation and has targeted governments, hotels, engineering firms and law firms since at least 2019.