FamousSparrow reused ProxyNotShell from Dec 2025-Feb 2026, deploying Deed RAT and TernDoor to sustain energy-sector access.

FamousSparrow reused ProxyNotShell from Dec 2025-Feb 2026, deploying Deed RAT and TernDoor to sustain energy-sector access.

The cyberthreat group targets an Azerbaijani oil-and-gas firm with repeated attack, as the China-linked actors extend targeting beyond hotels and telcos.