Three China-linked espionage campaigns linked to Sparrow malware.
Researchers linked three separate campaigns to infiltrate China using the Sparrow malware ecosystem, identifying common tools and operational overlap between clusters of activity that had previously been clearly tracked. The finding points to a broader ecosystem than isolated malware use.
Operationally, the link is important because it narrows the boundaries of attribution and helps defenders map campaigns using common malware infrastructure, tools of the trade, and development patterns rather than treating each hacking group as independent.
Open sources - closed narratives.