China-Nexus SilkParasite APT Deploys Five New RATs Against Central Asian Governments

Researchers assess the activity as China-nexus with medium confidence, citing victim selection, shared malware tooling, infrastructure links, and tradecraft commonly associated with Chinese espionage activity. The campaign used seven remote access trojan (RAT) families. Five were previously undocumented and named DriveSilkRAT, CookiETagRAT, NomadRAT, GoginRAT, and NodeEdgeRAT. The other two families were SpiceRAT and BloodAlchemy, which is linked to the ShadowPad and Deed RAT…

Diamond Model