techjacksolutions.com • 44m
FamousSparrow and SilkParasite: Cross-Platform APT Campaign Targeting Azerbaijani Energy Infrastructure
Chinese-nexus APT FamousSparrow, utilizing the SilkParasite toolset, is conducting high-intensity espionage against the Azerbaijani oil and gas sector. The campaign marks a strategic pivot toward cross-platform capabilities, deploying multi-architecture payloads (ELF, PE, Mach-O) to compromise Windows, Linux, and IoT/OT gateways. Initial access is achieved through specific CVE exploitation, with persistence maintained via systemd services and registry modifications. The primary objective is strategic intelligence theft and potential lateral movement from IT networks into Operational Technology (OT) environments, threatening critical national infrastructure stability.