logo

FamousSparrow APT Expands Targeting to Azerbaijani Energy Sector

ID: b6fc7169-c7ba-53d8-bb3d-0e63f8b3e4af

STIX ID: report--b6fc7169-c7ba-53d8-bb3d-0e63f8b3e4af

Feed Name: ThreatCluster

Threat Score
76/100

Date Published: 2026-05-13

Date Updated: 2026-05-14

...
...

**FamousSparrow APT expands into Azerbaijani energy sector:** From late December 2025 to February 2026, the China-aligned APT FamousSparrow conducted a multi-wave cyber-espionage campaign against an Azerbaijani oil and gas company, employing evolved DLL sideloading to deploy Deed RAT and Terndoor backdoors, demonstrating increased evasion, persistence, and a notable shift of targeting into the South Caucasus energy infrastructure.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.