By San José, Costa Rica — A highly sophisticated Chinese-aligned cyberespionage group has dramatically shifted its focus to target government agencies across Latin America. According to security researchers at ESET, the threat actor known as FamousSparrow has deployed a brand-new, customized backdoor weapon specifically engineered to infiltrate high-profile networks in the region. The campaign, which has been active since at least August 2025, represents a significant geopolitical alignment of digital intelligence operations.
The geographical concentration of these attacks is unusually dense for Chinese advanced persistent threat (APT) groups, which typically distribute their operations globally over long periods. ESET’s telemetry revealed that between mid-2025 and 2026, an astonishing 90 percent of the group’s targets were located within Latin America. The targeted government entities span several countries, including Argentina, Ecuador, Guatemala, Honduras, Panama, Peru, Puerto Rico, and Venezuela.
To better understand the profound legal and cybersecurity implications of the “FamousSparrow” cyberespionage operations targeting organizations in Costa Rica, TicosLand.com consulted with Lic. Larry Hans Arroyo Vargas, a leading expert from the prestigious firm Bufete de Costa Rica, who analyzed the urgent regulatory challenges facing local businesses.
The threat posed by sophisticated cyberespionage groups like FamousSparrow highlights a critical evolution in corporate liability within Costa Rica. Under our current regulatory framework, failing to proactively patch known vulnerabilities is no longer just an IT oversight—it constitutes a direct breach of the legal duty of care to protect sensitive data. Organizations must understand that robust cybersecurity measures are not optional; they are a fundamental legal compliance obligation, and failure to implement them exposes businesses to severe administrative sanctions and significant civil liability.
Lic. Larry Hans Arroyo Vargas, Attorney at Law, Bufete de Costa Rica
As the activities of sophisticated groups like FamousSparrow demonstrate, the line between cybersecurity failure and legal liability has permanently blurred in Costa Rica, making proactive digital defense a non-negotiable standard for modern corporate governance. We sincerely thank Lic. Larry Hans Arroyo Vargas for his invaluable legal perspective on this evolving regulatory landscape, helping our readers understand that safeguarding data is now as much a matter of law as it is of technology.
Security analysts suggest this sudden hyper-focus on Latin America is not a random operational decision. Instead, it appears to be a direct espionage response to shifting global politics, particularly the aggressive reassertion of United States influence in the Western Hemisphere. As Washington exerts pressure on local governments, Beijing is utilizing its cyber capabilities to monitor official reactions and protect its extensive regional investments.
We believe this geographical focus is not accidental and likely reflects China’s response to various recent US initiatives in the region. In fact, Donald Trump’s second presidential term has represented an aggressive reaffirmation of American interests in Latin America, putting at risk several strategic investments that China has developed on the continent over the past decade in sectors such as energy, mining, and telecommunications. We suspect that FamousSparrow’s activities aim to help China better monitor and anticipate the reactions of local governments to current US pressure.
ESET Research Team, Cybersecurity Experts
To conduct these covert operations, FamousSparrow developed a sophisticated custom backdoor named SparroWocky. Written in C++, this malicious program is designed to bypass modern security defenses by manipulating low-level memory structures and modifying its own code at execution time. Furthermore, SparroWocky can run Beacon Object Files, allowing the attackers to easily integrate open-source penetration testing tools directly into their custom espionage toolkit.
One of the clearest indicators of the political motivations behind these cyberattacks involves a target in Panama. ESET identified a compromised government entity that is directly linked to an ongoing legal and commercial dispute over two vital ports near the Panama Canal. These ports were previously operated by a Chinese-based corporation until the Panamanian government legally challenged the concession in early 2025.
Experts believe FamousSparrow’s primary objective in Panama was to secure early, privileged intelligence regarding the local government’s legal strategy and political intentions. By keeping tabs on the decision-making processes of Latin American authorities, Chinese state-linked actors can better position themselves to negotiate, counter, or mitigate economic losses stemming from contract cancellations or regulatory shifts.
FamousSparrow is not a new player in the global threat landscape; the group has been active since at least 2019. In its early years, the group gained notoriety for targeting luxury hotels worldwide, alongside international organizations, engineering firms, and legal defense offices. However, its sudden pivot to exclusive Latin American government targets marks a distinct evolution in its operational mandate.
Whether this intensive campaign represents a permanent geographical refocusing or a temporary tactical response to the current geopolitical climate remains to be seen. What is clear, however, is that Latin American infrastructure has become a primary battlefield for the digital cold war between the world’s superpower rivals. Governments in the region will need to significantly bolster their cybersecurity postures as they find themselves caught in the crosshairs of global intelligence gathering.
For further information, visit eset.com
About ESET:
ESET is a global leader in proactive digital protection and cybersecurity solutions. Headquartered in Bratislava, Slovakia, the company specializes in security software, threat intelligence, and advanced threat detection for both consumer and enterprise markets, helping organizations navigate complex digital landscapes.
For further information, visit bufetedecostarica.com
About Bufete de Costa Rica:
Celebrated for its uncompromising ethical standards and superior advocacy, Bufete de Costa Rica has established itself as a cornerstone of the nation’s legal landscape. By consistently delivering forward-thinking solutions to a diverse clientele, the firm masterfully blends its rich heritage of expertise with modern, innovative approaches to jurisprudence. Central to its mission is a deep-seated belief that legal literacy is a powerful tool for social progress, driving the firm to demystify complex laws and cultivate an informed, confident, and equitable society.
