This Sparrow doesn't migrate. [Research Saturday]

CyberWire Daily

N2K Networks, Inc.

Technology, News, Tech News, Daily News

4.8 • 1.1K Ratings

🗓️ 13 June 2026

⏱️ 23 minutes

🔗️ Recording | iTunes | RSS

🧾️ Download transcript

Summary

Martin Zugec, Technical Solutions Director at Bitdefender, discussing their work on "FamousSparrow APT Targets Azerbaijani Oil and Gas Industry." Bitdefender researchers uncovered a sustained cyber espionage campaign by the China-linked FamousSparrow group targeting an Azerbaijani oil and gas company, highlighting the growing focus on critical energy infrastructure in the South Caucasus. The attackers repeatedly exploited the same vulnerable Microsoft Exchange server over multiple months, deploying evolving versions of Deed RAT and Terndoor malware through sophisticated DLL sideloading techniques designed to evade detection and maintain persistence. The operation underscores FamousSparrow's adaptability and persistence, demonstrating how advanced threat actors continually refine their tooling and return to compromised environments until vulnerabilities are fully remediated and access is cut off. The research and executive brief can be found here: FamousSparrow APT Targets Azerbaijani Oil and Gas Industry Learn more about your ad choices. Visit megaphone.fm/adchoices

Transcript

Click on a timestamp to play from that location

0:00.0	You're listening to the Cyberwire Network, powered by N2K.
0:10.2	When it comes to mobile application security, good enough is a risk.
0:15.6	A recent survey shows that 72% of organizations reported at least one mobile application security incident last year,
0:23.5	and 92% of responders reported threat levels have increased in the past two years.
0:29.4	Guard Square delivers the highest level of security for your mobile apps
0:33.0	without compromising performance, time to market, or user experience.
0:38.3	Discover how Guard Square provides industry-leading security for your Android and iOS apps
0:44.1	at www.gardesquare.com.
0:48.0	Thank you. Hello everyone and welcome to the CyberWires Research Saturday.
1:03.1	I'm Dave Bittner, and this is our weekly conversation with researchers and analysts
1:07.7	tracking down the threats and vulnerabilities, solving some of the hard problems
1:12.2	and protecting ourselves in a rapidly evolving cyberspace. Thanks for joining us.
1:22.4	As Russia is focusing more and more on Europe and the Ukraine, of course.
1:29.0	We are seeing a little bit of conflict between Russian and Chinese APTs.
1:34.4	So we pay a lot of attention to countries that are areas of interest for these two powers.
1:43.0	That's Martin Zujek, Technical Solutions Director at Bit Defender.
1:47.0	The research we're discussing today is titled Famous Sparrow APT
1:52.0	targets Azerbaijani oil and gas industry.
2:00.0	Well, take us through the research.
2:04.5	What initially caught your attention here and what did you discover?
2:09.6	So what initially got our attention was actually old news
2:15.5	because we found some of the malware, Didred, for example, Moffu, Ternor,
	...

Transcript will be available on the free plan in 9 days. Upgrade to see the full transcript now.

Previous episode | Next episode

Disclaimer: The podcast and artwork embedded on this page are from N2K Networks, Inc., and are the property of its owner and not affiliated with or endorsed by Tapesearch.

Generated transcripts are the property of N2K Networks, Inc. and are distributed freely under the Fair Use doctrine. Transcripts generated by Tapesearch are not guaranteed to be accurate.