TL;DR

what: Check Point Research linked three China-nexus espionage clusters, SilentDelivery, OceanGate and DarkWire, through a shared malware ecosystem called Sparrow, built by a digital quartermaster it tracks as CopperDragon.

impact: Telecommunications providers, government bodies, military entities, research institutions and critical infrastructure across Latin America, Asia and Europe have been targeted over the past year with backdoors, keyloggers, credential stealers and kernel rootkits.

fix: No single vendor patch applies: the main exposures are internet-facing Linux servers, weak administrator passwords reachable over RDP, and users persuaded by fake Chrome certificate warnings, and Check Point and Positive Technologies have published technical reports on the tooling.

who: Telecoms, government, defense, shipping, IT and research organizations in Latin America, Asia and Europe are most at risk, along with any organization whose staff regularly visit sector websites in those regions.

Three…