Suspected Chinese-Speaking Hackers Target Central Asian Governments With OctLurk and SilkLurk

A Chinese-speaking threat actor is believed to be responsible for a series of cyber attacks targeting government organizations in Central Asia and the Syrian Arab Republic. The attacks, which began in January 2025, have focused on organizations in various sectors, including healthcare, research, and government offices, in countries such as Afghanistan, Kyrgyzstan, Tajikistan, Uzbekistan, and Kazakhstan. The threat actor is utilizing OctLurk and SilkLurk in these attacks. The targeted organizations are mainly located in Central Asia. The attacks have been ongoing since the start of 2025.