ETDA สำนักงานพัฒนาธุรกรรมทางอิเล็กทรอนิกส์
Electronic Transactions Development Agency
Report
Search
Home > List all groups > FamousSparrow

Threat Group Cards: A Threat Actor Encyclopedia

Permanent link APT group: FamousSparrow

NamesFamousSparrow (ESET)
Earth Estries (Trend Micro)
Country[Unknown]
MotivationInformation theft and espionage
First seen2019
Description(ESET) ESET researchers have uncovered a new cyberespionage group targeting hotels, governments, and private companies worldwide. We have named this group FamousSparrow and we believe it has been active since at least 2019.
ObservedSectors: Engineering, Government, Hospitality and law firms.
Countries: Brazil, Burkina Faso, Canada, France, Guatemala, Israel, Lithuania, Saudi Arabia, South Africa, Taiwan, Thailand, UK.
Tools usedMimikatz, nbtscan, ProcDump, SparrowDoor.
Information<https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/>
<https://www.trendmicro.com/en_us/research/23/h/earth-estries-targets-government-tech-for-cyberespionage.html>

Last change to this card: 06 September 2023

Download this actor card in PDF or JSON format

Previous: Evilnum
Next: Ferocious Kitten

Digital Service Security Center
Electronic Transactions Development Agency

Follow us on

Facebook Twitter

Report incidents

Telephone +66 (0)2-123-1227
E-mail [email protected]