Chinese-Speaking Hackers Hit Central Asian Governments

Since January 2025, a Chinese-speaking threat actor has targeted government organizations in Central Asia, including Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, Kazakhstan, and Syria. The attacks use malware named OctLurk and SilkLurk, affecting sectors like healthcare, research, and government offices. The campaign remains active, with no attribution to a specific state actor confirmed.