中国国家黑客在拉美多国政府网络部署 SparroWocky 隐蔽后门
Chinese state hackers deploy SparroWocky backdoor across Latin American governments
- 与“盐台风”（Salt Typhoon）存在关联的中国国家背景黑客组织 FamousSparrow 在拉美7国政府网络中部署了名为“SparroWocky”的恶意软件。 State-sponsored actor FamousSparrow deployed 'SparroWocky' malware across 7 Latin American governments, linked to the Salt Typhoon cluster.
- 关键入侵目标包括负责监管巴拿马运河周边关键物流节点的巴拿马港务局。 Key compromise targets include Panamanian port authorities overseeing critical logistics around the Panama Canal.
- 使中国情报机构能够预先获取商船货运舱单遥测数据及主权国家政府间的商业合同谈判细节。 Provides Chinese intelligence pre-positioned telemetry on commercial vessel manifests and sovereign government contract negotiations.
- 暴露了“一带一路”公开经济合作承诺与国家级黑客暗中在基础设施植入后门之间的安全悖论。 Exposes the security contradiction between public Belt & Road economic cooperation and covert state-sponsored infrastructure backdooring.
据威胁情报机构 Huntress 经由《CyberScoop》报道，中国网络间谍利用定制的隐蔽持久后门 SparroWocky [1]，攻破了拉美多国政府部委、港务当局及电信骨干网的数字系统。黑客通过企业级 VPN 终端建立隧道，植入隐蔽 rootkit 以监视巴拿马运河沿线的海运物流动态并窃取官方通信机密 [2]。
这一网络入侵行动表明，北京正展开旨在监控全球供应链要道的战略物流网络间谍活动。中国情报部门并未选择直接瘫痪系统，而是优先在关键海上中转枢纽与经济规划部门内部进行长期情报潜伏与搜集。通过对渗透合作国政府交通与枢纽机构的深度掌控，北京得以对整个美洲地区的双边贸易、矿产运输和外交往来维持全天候的情报监控。
Chinese cyber operatives breached digital networks across Latin American ministries, port authorities, and telecommunications backbones using a custom backdoor dubbed Sparrowocky [1], threat intelligence firm Huntress reported via CyberScoop. Operators tunneled through enterprise VPN endpoints, deploying stealth rootkits to monitor maritime shipping traffic along the Panama Canal and access government correspondence [2].
The intrusion illustrates strategic logistics espionage aimed at monitoring global supply routes. Rather than immediate disruption, Chinese intelligence prioritized long-term collection inside critical maritime transit nodes and economic planning bureaus. Infiltrating foreign transit authorities gives Beijing continuous insight into bilateral trade, mineral shipments, and diplomatic movements across the Americas.
中国网络安全分析人士在内部论坛上强调运河航运遥测数据的战略价值，而中国外交部发言人则将相关报道斥为“虚假信息”。
Chinese cyber analysts on internal forums noted the strategic value of canal shipping telemetry, while foreign ministry spokespersons dismissed reports as 'disinformation'.
防火长城全面封锁了美国网络安全与基础设施安全局（CISA）及国际社会关于 FamousSparrow 和“盐台风”的调查报道；国内媒体被严令禁止提及拉美关键基础设施遭入侵一事。
CISA and international reporting on FamousSparrow and Salt Typhoon are blocked by the Great Firewall; domestic news reports are prohibited from mentioning Latin American infrastructure compromises.
锁定巴拿马港务当局与北京监控全球关键航道咽喉的海洋地缘战略高度契合。
Targeting Panamanian port authorities aligns with Beijing's maritime strategy to monitor global chokepoints along international shipping corridors.