SilkParasite Espionage Campaign Targets Central Asian Governments with Five New RATs

A previously unreported cyber espionage operation dubbed SilkParasite has been observed targeting government bodies in Central Asia. The intrusion set makes use of seven remote access tool (RAT) families, five of which have never been previously documented: DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. SilkParasite, first discovered in late 2025, is assessed to be a

The article reports a previously unreported cyber espionage campaign, SilkParasite, targeting Central Asian government entities using seven remote access tool (RAT) families, including five newly documented RATs (DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT). These tools enable persistent remote control and data exfiltration across victim environments. From a RealGround perspective, such campaigns increase the risk that AI infrastructure, models, or supporting systems within government or enterprise environments could be compromised via the same RAT-based footholds, undermining the integrity of AI supply chains and data pipelines. Organizations should harden their AI-related infrastructure against RAT-driven lateral movement, maintain detailed SBOM and dependency inventories, and conduct continuous red teaming to identify where compromised endpoints or libraries could be leveraged to manipulate AI systems or steal sensitive AI assets.