Active China-Linked Cyber Espionage Campaign Targets Gov’t Across Asia

Bitdefender has released research detailing SilkParasite, an active, year-long China-nexus cyberespionage campaign targeting government bodies across Central Asia. The operation is using seven custom remote access tools (RATs), five of them newly identified.

SilkParasite is the latest evidence of a trend Bitdefender has tracked since early 2025: as Russia’s regional influence recedes, China-nexus threat actors are expanding operations into Central Asia, targeting government officials who manage the region’s deepening economic ties with Beijing. The objective is spying, not disruption or financial gain.

Key findings:

An active, year-long campaign using seven custom RATs against Central Asian government targets

Professionally engineered, modular toolset built for minimal footprint and evasion, using AI only to speed development, unlike poorly written AI-generated malware elsewhere

Command/Control (C2) traffic routed through legitimate cloud services, including Google Drive, to blend in with normal network traffic

Why it matters: China-nexus tooling typically resurfaces elsewhere, putting organizations across the globe at risk for similar attacks.

You can read the report here:https://businessinsights.bitdefender.com/silkparasite-tracking-china-nexus-apt-across-central-asia

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading