SilkParasite: Tracking a China-Nexus APT Across Central Asia
Brief
TL;DR: SilkParasite is a cyberespionage operation, assessed at medium confidence as China-nexus, that targeted government bodies across Central Asia. Bitdefender Labs found seven remote access tool (RAT) families in use, five of which were previously undocumented; we identified and named them: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT.
The toolset is small, modular, and professionally engineered, and it carries traces of AI-assisted development.
SilkParasite: Tracking a China-Nexus APT Across Central Asia