THREATNOIR
Subscribe
Back to advisories

SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

SilkParasite, a China-nexus espionage campaign, is actively targeting Central Asian government entities with five newly documented RAT families including DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The operation uses AI-assisted phishing lures to establish persistent remote access. If your organization has government or regional ties to Central Asia, assume you may be in scope.

HIGHAdvisoryAug 20, 2026
Action required
Immediately hunt for C2 beacons and file execution from the five new RAT families. Correlate with phishing submissions from the past 90 days. Block known IOCs at network perimeter and deploy detection signatures for DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT if available from threat feeds.
Affected products
Bitdefender Labs
Linked articles
Source links