
In July 2024, the cyber world witnessed a sophisticated attack orchestrated by a Chinese threat actor known as FamousSparrow. This malicious operation targeted a U.S. trade organization and a Mexican research institution, deploying newly documented variants of the SparrowDoor backdoor and the ShadowPad malware. This incident marked the first known instance of FamousSparrow using ShadowPad, a tool commonly associated with