Chinese APT Hackers Exploit Microsoft Exchange to Breach Energy Sector Network

Cybersecuritynews •Tushar Subhra Dutta • May 14, 2026

A Chinese state-linked hacking group known as FamousSparrow has quietly infiltrated an Azerbaijani oil and gas company, exploiting an unpatched Microsoft Exchange server to plant multiple backdoors inside the network. The attack ran from late December 2025 through late February 2026 and stands as one of the most detailed Chinese APT intrusions targeting energy infrastructure […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Chinese APT FamousSparrow Breaches Energy Sector via Microsoft Exchange Exploit Chinese state-aligned hackers, identified as FamousSparrow, infiltrated an Azerbaijani oil and gas company by exploiting an unpatched Microsoft Exchange server. The attack, which occurred from late December 2025 to late February 2026, involved deploying multiple backdoors, including Deed RAT and Terndoor, to maintain persistent access to the network. This espionage operation is notable for its duration and sophistication, marking it as one of the most detailed intrusions targeting energy infrastructure. The breach highlights vulnerabilities in critical infrastructure and the ongoing threat posed by state-sponsored actors. The full scope of the compromise and the extent of data exfiltration remain unclear, but the incident raises significant security concerns within the energy sector. 2 sources 73

Extracted Entities

Chinese APT Hackers Exploit Microsoft Exchange to Breach Energy Sector Network

The full story

Extracted Entities

APT Groups (1)

Attack Types (1)

Industries (1)

MITRE ATT&CK (1)

Platforms (1)