17-09-2026
SilkParasite Infrastructure: SpiceRAT Servers Tied to Energy and Government Targets Across Central Asia
https://hunt.io/blog/silkparasite-spicerat-central-asia-infrastructure
Report completeness: Medium
Actors/Campaigns:
Silkparasite
Ghostemperor
Indigozebra
Threats:
Spicerat
Nodeedgerat
Nomadrat
Bloodalchemy
Typosquatting_technique
Smac
Victims:
Government, Energy, Telecommunications
Industry:
Energy, Transport, Telco, Government, Petroleum
Geo:
Uzbekistan, Kyrgyzstan, China, Estonia, Tajikistan, Asia, Chinese, Turkmenistan, Bulgaria, Asian
ChatGPT TTPs:
do not use without manual checkT1036.005, T1583.001
IOCs:
IP: 55
Domain: 56
Hash: 3
File: 4
Soft:
nginx
Algorithms:
sha1, sha256