A custom “SparrowDoor” backdoor has allowed the attackers to collect data from targets around the globe.
Threatpost