🔴 SilkParasite Hackers Use SpiceRAT Infrastructure to Target Central Asian Governments and Energy Firms

A wider cluster of SpiceRAT command-and-control infrastructure has been linked to the SilkParasite cyber-espionage activity targeting government, telecommunications, and energy-related entities across Central Asia.

The infrastructure findings extend the operational footprint around servers previously associated with the suspected China-nexus cluster, but do not establish that any impersonated organization was compromised.

Detection logic derived from Cisco Talos’ 2024 analysis of SpiceRAT first flagged related systems in late 2025, while a coordinated group of five active servers emerged in mid-March 2026.