FamousSparrow

A threat actor linked to China targeted an Azerbaijani oil and gas company between late December 2025 and late February 2026, marking an expansion of its targeting. The activity was attributed to a hacking group known as FamousSparrow. The intrusion involved repeated Microsoft Exchange exploitation.

China's 'FamousSparrow' APT group has launched repeated cyberattacks on an Azerbaijani oil and gas firm, expanding their targeting beyond previous sectors. The group's actions indicate a growing threat to the energy industry. The attacks are part of a broader campaign by China-linked actors.