Threat Intelligence / Actor / FamousSparrow

FamousSparrow

Nation: China · 1 tracked threat(s) · Categories: APT

Also known as: Earth Estries, UAT-9244, Salt Typhoon-adjacent ecosystem, GhostEmperor-adjacent

Tracked threats

FamousSparrow APT Multi-Wave Intrusion at Azerbaijani Oil & Gas Company — Evolved Two-Stage DLL Sideloading Delivers Deed RAT (0xFF66ABCD) and Terndoor via Mofu Loader — CRITICAL

Full actor intelligence — infrastructure, IOCs, detection coverage and operator fingerprints — is available via the Threadlinqs MCP server (Purple tier). View plans →

Threadlinqs Intelligence