Skip to content

threat actor · Origin not attributed

CopperDragon

On record in CyberSIXT

3 articles this week: Check Point links three espionage campaigns to CopperDragon

Sources name this actor but link nothing to it yet: no CVE, technique or software is on record.

Open CopperDragon's actor page

CopperDragon is named in three CyberSIXT article summaries. Check Point Research identifies it as a suspected supplier of the Sparrow framework and links it to three reported espionage campaigns; the summaries describe shared tools and infrastructure across the activity. Little is on record beyond these reports.

Source: CyberSIXT summary, 14 November 2026. Written by CyberSIXT's model from CyberSIXT's own article summaries and records, and checked against them; read the articles before relying on it.

Origin
Not attributed
On record in
CyberSIXT

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: MITRE ATT&CK (© The MITRE Corporation, reproduced and distributed with its permission), the MISP Galaxy (CC0), and CyberSIXT's own coverage.