Breaches and incidentsBriefChecked against a primary source
SilkParasite: China-nexus espionage against Central Asian governments
Bitdefender: about 65 infection instances (upper bound), mostly Asia, after a first detection around Oct 2025 at a government body involved in economic...
- Disclosed
What happened
- Bitdefender: about 65 infection instances (upper bound), mostly Asia, after a first detection around Oct 2025 at a government body involved in economic decision-making; lures for all five Central Asian states plus one Georgian entity.
- Technique: spear-phishing Office macros in password-protected RARs, DLL sideloading; seven families: new DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, NodeEdgeRAT, plus SpiceRAT and BloodAlchemy. Medium-confidence assessment that development was AI-assisted (placeholder keys, leftover test code).
- Attribution: Bitdefender, medium confidence China-nexus; no single named group.
Sources
- https://businessinsights.bitdefender.com/silkparasite-tracking-china-nexus-apt-across-central-asia
- https://thehackernews.com/2026/08/silkparasite-espionage-campaign-targets.html
This is a brief: a short, sourced summary from our incident tracking. Full advisories add commands to check whether you are affected.