September 18, 2026
- FamousSparrow has replaced SparrowDoor with a new flagship backdoor, SparroWocky, in a campaign ESET has tracked since at least August 2025 against government bodies in seven Latin American countries — Guatemala, Honduras, Puerto Rico, Panama, Venezuela, Peru and Argentina. The backdoor is heavily anti-analysis, borrows from open-source projects, and supports file exfiltration, screenshots and host recon; ESET notes one Panamanian victim is directly involved in the canal ports dispute, and the group has been publicly linked to Salt Typhoon (ESET, The Record). · Threat Activity
in Plugin4Shell Turns Pinned Agent Plugins Into Zero-Click RCE